Seeyon Zhiyuan OA Web Application System Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in Seeyon Zhiyuan OA Web Application System version 8.1 SP2. The issue arises from an unknown processing in the file 'seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\common\js\addDate\date.jsp', specifically within the URL Parameter Handler component. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.