Vulnerability Details CVE-2021-30171
Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.6%
CVSS Severity
CVSS v3 Score 4.6
CVSS v2 Score 3.5
References
Products affected by CVE-2021-30171
-
cpe:2.3:a:junhetec:enterprise_resource_planning_point_of_sale_system:2013.10