PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
medium·Web Vulnerabilities·Updated Jul 17, 2025

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsurl
CostFree
2.4k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2025-2711
5.3
CVSSmedium
Exploitable remotely over the internet · no authentication required.

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Attack Vector
Network
Privileges Req.
None
User Interaction
P
Affected
UFIDA ERP-NCby Yonyou
5.0
Updated Sep 9, 2026View on NVD →
Similar Tools
medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→critical
Yonyou U8 SQL Injection Scanner
→critical
YonYou KSOA SQL Injection Scanner
→medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→high
Yonyou NC BaseApp Deserialization of Untrusted Data Scanner
→medium
Content-Security-Policy Bypass - jQuery CDN
→medium
YesWiki Bazar Widget - Reflected XSS via 'id' Parameter
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.