Unrated severityOSV Advisory· Published Dec 12, 2025· Updated Dec 12, 2025
CVE-2025-67344
CVE-2025-67344
Description
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.
Affected products
1- Range: v1.0, v1.5, v2.0, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.