Description
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.
Medium · 4.6
CVE-2025-67344
EUVD-2025-203100GHSA-3r5x-6g7r-3p8p
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.
Published Dec 12, 2025 · Updated Dec 12, 2025 · Assigned by mitre