CVE-2025-67341

creationtimestamp| type| source ---|---|--- 2025-12-12 20:04:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sv4ni2w72q...

CVE-2025-67341

CVE-2025-67341 affects jshERP 3.5 and earlier, with a stored XSS in uploaded PDF files that can be accessed via static URLs by any user. The issue’s root cause is a stored XSS vulnerability in PDF upload handling, leading to potential script execution within users’ contexts. Severity is CVSS v3.1...

EUVD-2025-67341

Malicious code in regularptarmiganz3n npm...