CVE-2025-8222

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this issue is some unknown functionality of the file GoodsController.java. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Multiple endpoints are affected.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

Vendor	Product	Versions
jerryshensjf	JPACookieShop 蛋糕商城JPA版	24a15c02b4f75042c9f7f615a3fed2ec1cefb999

References

https://github.com/Bemcliu/cve-reports/blob/main/cve-05-%E8%9B%8B%E7%B3%95%E5%95%86%E5%9F%8EJPA%E7%89%88-Stored%20XSS/readme.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.317810Permissions Required, VDB Entry
https://vuldb.com/?id.317810Third Party Advisory, VDB Entry
https://vuldb.com/?submit.621785Third Party Advisory, VDB Entry

Timeline

Published: Jul 27, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-82234.3A vulnerability, which was classified as problematic, was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2e CVE-2025-82245.5A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_s CVE-2025-82253.3A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file CVE-2025-82269.8A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been classified as problematic. Affected is an unknown function of the CVE-2025-82279.8A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical. Affected by this vulnerability is an unknow CVE-2025-82288.8A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function getPage CVE-2025-82298.8A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /CVE-2025-82308.8A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the CVE-2025-82316.8A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processin CVE-2025-82329.8A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of CVE-2025-82339.8A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2025-82349.8A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown fun