medium6.7
CVE-2025-9211
Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalat…
Impact
Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otalio | Otalio Ship Property Management System | before 2.22.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.