Search results

/msg/add endpoint is vulnerable to stored XSS attacks

Status: Open.

#140 In jishenghua/jshERP;

· Arron-bit opened on Dec 6, 2025

/systemConfig/upload endpoint is vulnerable to stored XSS attacks

Status: Open.

#139 In jishenghua/jshERP;

· Arron-bit opened on Dec 4, 2025

switch to openJDK ?

Status: Open.

#138 In jishenghua/jshERP;

· maplewang opened on Oct 6, 2025

多单位设计的问题

Status: Open.

#137 In jishenghua/jshERP;

· maplewang opened on Oct 5, 2025

导出订单出现问题

Status: Open.

#136 In jishenghua/jshERP;

· sfmoting opened on Sep 24, 2025

【优化问题】填写销售订单或销售出库的订单时，自动给新增的商品单价添加移动平均价

Status: Open.

#133 In jishenghua/jshERP;

· PolarisTime opened on Aug 19, 2025

Unauthenticated remote command execution still exists in jsh_erp after patching

Status: Open.

#132 In jishenghua/jshERP;

· Fushuling opened on Aug 14, 2025

Incomplete fix

Status: Open.

#131 In jishenghua/jshERP;

· RacerZ-fighting opened on Aug 14, 2025

There is an Unauthenticated Remote Command Execution in jsh_erp

Status: Open.

#130 In jishenghua/jshERP;

· Fushuling opened on Aug 13, 2025

There is an Incorrect Access Control vulnerability in jshERP

Status: Open.

#129 In jishenghua/jshERP;

· Fushuling opened on Aug 12, 2025

Improper Authorization Across Dozens of Endpoints Allowing Tenant Isolation Bypass and Privilege Escalation

Status: Open.

#127 In jishenghua/jshERP;

· ez-lbz opened on Jul 25, 2025

IDOR vulnerability (normal user can reset multiple users' passwords via /jshERP-boot/user/deleteBatch endpoint)

Status: Open.

#126 In jishenghua/jshERP;

· ez-lbz opened on Jul 25, 2025