CVE-2025-60801

High · 8.2

CVSS

8.2

EPSS

0.5%

Published

Oct 24, 2025

CISA due date

—

The record

jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the jsh_erp function.

Ecosystem	Package	Introduced	Fixed