hailey888 oa_system Backend Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the hailey888 oa_system application, specifically in the Backend component. This issue affects versions of the application released prior to January 1, 2025. The vulnerability arises in the testMess function of the InformManageController.java file, where improper handling of the 'menu' argument allows for XSS attacks. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.