4 matches found
CVE-2025-67344
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
4.6CVSS5.9AI score0.00173EPSS
SaveExploits1References1
EUVD-2025-203100
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...
4.6CVSS5.3AI score0.00173EPSS
SaveExploits1References2
CVE-2025-67344
jshERP, a homegrown ERP system developed by Ji Sheng Hua, is affected by a stored Cross Site Scripting (XSS) vulnerability in versions v3.5 and earlier . The root cause is the improper neutralization of input via the /msg/add API endpoint, allowing an attacker to inject malicious scripts that are...
5.8AI score0.00173EPSS
SaveExploits1References1Affected Software1
20