1. Home
  2. CVE Database
  3. CVE-2025-67341
MEDIUM · 4.6

CVE-2025-67341

jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be access...

Vulnerability Description

jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be accessed via static URLs, making them accessible to all users.

CVSS Score

4.6

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
JishenghuaJsherp<= 3.5

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2025-67341?

CVE-2025-67341 is a vulnerability with a CVSS score of 4.6 (MEDIUM). jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be access...

How severe is CVE-2025-67341?

CVE-2025-67341 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-67341?

Check the references section above for vendor advisories and patch information. Affected products include: Jishenghua Jsherp.