PT-2025-50732 · Yangshare · Yangshare Warehousemanager 仓库管理系统

Zzdzz · Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-14538

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions yangshare warehouseManager 仓库管理系统 version 1.1.0

Description A security issue exists in yangshare warehouseManager 仓库管理系统 version 1.1.0. The addCustomer function within the CustomerManageHandler.java file is susceptible to cross site scripting. Manipulation of the Name argument can lead to remote execution of the attack. The exploit for this issue has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-14538

Affected Products

Yangshare Warehousemanager 仓库管理系统

References · 6

• 🔥 https://gitee.com/yangshare/warehouseManager/issues/ID9NAU · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14538 · Security Note
• https://t.me/CVEtracker/39530 · Telegram Post
• https://vuldb.com/?id.335877 · Note
• https://vuldb.com/?submit.703736 · Note
• https://vuldb.com/?ctiid.335877 · Note