CVE-2021-28109: Improper Neutralization of Input During Web Page Generation

TranzWare POI FIMI before 4.2.20.4.2 allows logintw.php reflected Cross-Site Scripting XSS...