medium4.6
CVE-2021-30171
Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry …
Impact
Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Junhetec | Enterprise Resource Planning Point Of Sale System | Version 2013.10 |