VYPR
← All advisories
Medium severity4.6OSV Advisory· Published Dec 12, 2025· Updated Jun 17, 2026

CVE-2025-67341

CVE-2025-67341

Description

jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be accessed via static URLs, making them accessible to all users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • jshERP/jshERPOSV3 versions
    v1.0, v1.5, v2.0, …+ 2 more
    • (no CPE)range: v1.0, v1.5, v2.0, …
    • cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*:*range: <=3.5
    • (no CPE)range: <=3.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.