CVE-2025-67344

Vulnerability Description

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.

Published Date

December 12, 2025

Last Modified

December 19, 2025

Source

NVD