In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a userβs browser via logon.jsp?logon_error= on the login screen of the Web application.
CPE | Name | Operator | Version |
---|---|---|---|
transaction_management | eq | <= 2021712 |