CVE-2021-30171

CVE-2021-30171 affects Jun-He Technology / Junghwa ERP POS: special characters on the ERP POS news page are not filtered, allowing remote authenticated attackers to inject JavaScript and perform stored XSS, with potential access to and manipulation of customer information. Root cause: unfiltered ...