Vulnerabilities

TI-2025-08446 CVE-2025-9211 · GHSA-2482-vx42-rm68

Cross-site scripting in Otalio Ship Property Management System

LOW 32

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.0047 Published 2026-08-18 Fixed in 2.22.0 CWE-79

TI-2025-08445 CVE-2025-9210 · GHSA-83h2-xpgj-mf4q

Missing JSON Web Token signature validation in Otalio Ship Property Management System

LOW 37

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00257 Published 2026-08-18 Fixed in 2.22.0 CWE-347

Vulnerabilities

Filters

Cross-site scripting in Otalio Ship Property Management System

Missing JSON Web Token signature validation in Otalio Ship Property Management System