CVE-2025-67341

creationtimestamp| type| source ---|---|--- 2025-12-12 20:04:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sv4ni2w72q...

CVE-2025-67341

The jshERP (Huaxia ERP) system, versions 3.5 and earlier , is susceptible to a stored cross-site scripting (XSS) vulnerability. An attacker can exploit this by uploading PDF files containing malicious XSS payloads. These files are accessible via static URLs , which can expose the payload to all u...

EUVD-2025-67341

Malicious code in regularptarmiganz3n npm...