CVE-2025-9569 - Sunnet｜eHRD CTMS - Reflected Cross-site Scripting

Back Back to CVE browser

MEDIUM

Sunnet｜eHRD CTMS - Reflected Cross-site Scripting

Published Sep 1, 2025

5.1

MEDIUM

CVSS 4.0

EPSS 0.26%

Description

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

Affected products

Vendor Sunnet Product eHRD CTMS Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Sunnet

eHRD CTMS

unaffected

Version	Status	Constraints
0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-26319
Advisory
https://www.twcert.org.tw/en/cp-139-10357-7de41-2.html
third-party-advisoryThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-10356-ea431-1.html
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-26319		Advisory
https://www.twcert.org.tw/en/cp-139-10357-7de41-2.html		third-party-advisoryThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-10356-ea431-1.html		third-party-advisoryThird Party Advisory