Filtered by vendor Junhetec Subscriptions
Filtered by product Enterprise Resource Planning Point Of Sale System Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-30171 1 Junhetec 1 Enterprise Resource Planning Point Of Sale System 2024-09-17 4.6 Medium
Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
CVE-2021-30170 1 Junhetec 1 Enterprise Resource Planning Point Of Sale System 2024-09-16 4.6 Medium
Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.