CVE-2025-9736

The CVE-2025-9736 entry concerns an XSS vulnerability in O2OA’s Personal Profile Page, specifically in the file path /x_query_assemble_designer/jaxrs/statement. The issue arises from manipulating the description/queryName argument, enabling cross-site scripting via remote exploitation. Public dis...