CVE-2025-9211

Description

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting

CVSS Vector

References

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0024.md
• https://www.otalio.com/solutions/