CVE-2025-9931 | Jinher OA 1.0 POST Request login!changePassWord.action Account cross site scripting

A vulnerability labeled as problematic has been found in Jinher OA 1.0. Affected is an unknown function of the file /jc6/platform/sys/login!changePassWord.action of the component POST Request Handler. The manipulation of the argument Account results in cross site scripting.

This vulnerability is reported as CVE-2025-9931. The attack can be launched remotely. Moreover, an exploit is present.