2 matches found
CVE-2021-28109: Improper Neutralization of Input During Web Page Generation
TranzWare POI FIMI before 4.2.20.4.2 allows logintw.php reflected Cross-Site Scripting XSS...
6.1CVSS5.8AI score0.00735EPSS
SaveExploits0References2
PT-2021-17745
Name of the Vulnerable Software and Affected Versions: TranzWare POI FIMI versions prior to 4.2.20.4.2 Description: The issue allows for reflected Cross-Site Scripting XSS in the login tw.php file. This can potentially lead to malicious script execution on the client-side. Recommendations: For...
6.1CVSS0.00735EPSS
SaveExploits0References6
20