CVE-2025-67344

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.

More information : https://github.com/jishenghua/jshERP/issues/140