hailey888 oa_system Cross-Site Scripting Vulnerability in the Backend Component

A cross-site scripting vulnerability has been identified in hailey888 oa_system versions prior to 2025.01.01. The issue resides in the Backend component, specifically within the outAddress function of the AddrController.java file. The vulnerability arises from improper handling of the outtype argument, allowing for the injection of malicious scripts. This issue can be exploited remotely and requires user interaction.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.