CVE-2025-3389

The CVE-2025-3389 entry concerns hailey888 oa_system (Backend) with the vulnerable function testMess in InformManageController.java. The issue arises from manipulation of the menu argument, causing cross-site scripting. A remote attacker could exploit it, and public exploit references exist. Conn...