exploitDog

GHSA-3r5x-6g7r-3p8p

Опубликовано: 12 дек. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 4.6

Описание

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.

Ссылки

EPSS

Процентиль: 9%

0.00033

Низкий

4.6 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-67344

CVSS3: 4.6

nvd

около 2 месяцев назад

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.

EPSS

Процентиль: 9%

0.00033

Низкий

4.6 Medium

CVSS3

CVE ID

Дефекты

CWE-79