CVE-2025-67344

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

EUVD-2025-203100

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

CVE-2025-67344

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

CVE-2025-67344

CVE-2025-67344 affects jshERP v3.5 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability in the /msg/add endpoint. The issue is reported across multiple feeds (e.g., Red Hat, EUVD, NVD, OSV) and is described as stored XSS in the message-adding functionality, potentially enabling scr...