VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jul 22, 2025· Updated Apr 29, 2026

CVE-2025-7947

CVE-2025-7947

Description

A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • jshERP/jshERP2 versions
    cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*:*range: <=3.5
    • (no CPE)range: <=3.5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.