PT-2025-50732 · Yangshare · Yangshare Warehousemanager 仓库管理系统

·

CVE-2025-14538

·

Published

2025-12-11

·

Updated

2025-12-11

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions yangshare warehouseManager 仓库管理系统 version 1.1.0
Description A security issue exists in yangshare warehouseManager 仓库管理系统 version 1.1.0. The addCustomer function within the CustomerManageHandler.java file is susceptible to cross site scripting. Manipulation of the Name argument can lead to remote execution of the attack. The exploit for this issue has been publicly disclosed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-14538

Affected Products

Yangshare Warehousemanager 仓库管理系统