5 matches found
CVE-2025-67344
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
EUVD-2025-203100
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
CVE-2025-67344: Improper Neutralization of Input During Web Page Generation
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
CVE-2025-67344
jshERP, a homegrown ERP system developed by Ji Sheng Hua, is affected by a stored Cross Site Scripting (XSS) vulnerability in versions v3.5 and earlier . The root cause is the improper neutralization of input via the /msg/add API endpoint, allowing an attacker to inject malicious scripts that are...
