Otalio Ship Property Management System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Otalio Ship Property Management System: 2 record(s), with affected versions and fixes.
CVE-2025-9211
Medium · 6.7
CWE-79 Aug 18, 2026
Cross-site scripting in Otalio Ship Property Management System
Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting
CVE-2025-9210
High · 8.1
CWE-347 Aug 18, 2026
Missing JSON Web Token signature validation in Otalio Ship Property Management System
Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs