Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-9211

Cross-site scripting in Otalio Ship Property Management System

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mandiant

Description

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Otalio Ship Property Management System

Default version status: unaffected

  • 0 to < 2.22.0affected

References