CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2025/12/12 4:15 p.m.•6 views

CVE-2025-67344

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

4.6CVSS5.8AI score

Exploits0References1

NVD•added 2025/12/12 4:15 p.m.•4 views

CVE-2025-67344

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

4.6CVSS0.00145EPSS

Exploits1References1

CNNVD•added 2025/12/12 12:0 a.m.•4 views

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of China's Ji Sheng Hua. A security vulnerability exists in jshERP v3.5 and earlier versions, which stems from a stored cross-site scripting vulnerability in the /msg/add endpoint...

4.6CVSS5.8AI score0.00145EPSS

Exploits1References2

Positive Technologies•added 2025/12/12 12:0 a.m.•5 views

PT-2025-50955

Name of the Vulnerable Software and Affected Versions jshERP versions prior to 3.5 Description The software is susceptible to a stored Cross Site Scripting XSS issue. The vulnerability exists through the /msg/add API endpoint. An attacker could potentially inject malicious scripts that are then...

4.6CVSS5.8AI score0.00145EPSS

Exploits1References5