Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3028 A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgLi… https://www.cve.org/CVERecord?id=CVE-2026-3028
Post summary
A vulnerability (CVE-2026-3028) was identified in erzhongxmu JEEWMS up to version 3.7, affecting the doAdd function in a specific Java controller file.
CVE-2026-3028 Cross-Site Scripting in erzhongxmu JEEWMS via Argument Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3028
Post summary
A Cross‑Site Scripting vulnerability (CVE‑2026‑3028) was disclosed in erzhongxmu JEEWMS via argument manipulation, with technical details available on Vulmon.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | huayi-tec | jeewms | - | - | - |