CVE-2025-3390

CVE-2025-3390 affects hailey888 oa_system (Backend) with a flaw in DaymanageController.java:addandchangeday. Manipulation of the argument scheduleList enables cross-site scripting. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. The product uses a rolling...

CVE-2025-3390: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in hailey888 oasystem up to 2025.01.01. Affected is the function addandchangeday of the file cn/gson/oass/controller/daymanager/DaymanageController.java of the component Backend. The manipulation of the argument scheduleList leads to...