Description (CNA)
Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jun-He Technology Ltd. / ERP POS | affected 2013.10 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.