CVE-2025-29688

MEDIUM 6.1CVE-2025-29688 · Published 14/05/2025 · updated 17/06/2026

In short

CVE-2025-29688 is a MEDIUM (CVSS 6.1) vulnerability affecting oa system (hailey888).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.5% of all vulnerabilities.
Fix: update to 2025-01-01 or later.

Package	Affected versions	Patched versions
oa system hailey888	`< 2025-01-01`	`2025-01-01`

Description

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /daymanager/daymanageabilitycontroller.java.

References

gitee.com/hailey888/oa_system/issues/IBRRZX · Exploit

More vulnerabilities in oa system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

oa system

hailey888

< 2025-01-01

2025-01-01

More vulnerabilities in oa system

See all →