CVE-2025-9211

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting...

CVE-2025-9211

Otalio Ship Property Management System versions before 2.22.0 contain a stored cross-site scripting (XSS) vulnerability in the application security page caused by unescaped stored values . An authenticated attacker can exploit this to escalate privileges by injecting persistent scripts. The CVSS ...