Enterprise Resource Planning Point Of Sale System CVEs and Security Vulnerabilities

CVE-2021-30171

Jun-He Technology Ltd. ERP POS - Stored XSS-2

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Junhetec

Products

Enterprise Resource Planning Point Of Sale System

CVE-2021-30170

Jun-He Technology Ltd. ERP POS - Stored XSS-1

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.