CVE-2025-29690

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.java...

CVE-2025-29690

creationtimestamp| type| source ---|---|--- 2025-05-14 21:32:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16415 2025-05-14 22:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whzbnh2h...