2025-12-12 00:00:00
mitre
PUBLISHED
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.