4 matches found
CVE-2025-67344
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
4.6CVSS5.8AI score0.00173EPSS
SaveExploits1References1
EUVD-2025-203100
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
4.6CVSS5.8AI score0.00173EPSS
SaveExploits1References2
CVE-2025-67344
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
0.00173EPSS
SaveExploits1References1
CVE-2025-67344
The jshERP (Huaxia ERP) system, versions 3.5 and earlier , is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation within the /msg/add API endpoint. An attacker can inject malicious scripts that are stor...
4.6CVSS5.8AI score0.00173EPSS
SaveExploits1References1Affected Software1
20