PT-2021-18645

Name of the Vulnerable Software and Affected Versions ERP POS affected versions not specified Description The issue concerns a stored Cross-site scripting XSS attack. It occurs because special characters in the ERP POS customer profile page are not filtered from users' input. This allows remote...

竣禾科技 ERP POS 跨站脚本漏洞

Junghwa Technology ERP POS System is an application software of China Junghwa Technology Co. system used for ERP management. ERP POS suffers from a cross-site scripting vulnerability that originates from special characters on the customer profile page not being filtered during user input, which...

CVE-2021-30170: Improper Neutralization of Input During Web Page Generation

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...