Skip to content
OpenAdvisories

Product · Jun-He Technology

ERP POS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.6
    CVE-2021-30171

    Jun-He Technology Ltd. ERP POS - Stored XSS-2

    Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s …

    Jun-He Technology ERP POS
  • Medium 4.6
    CVE-2021-30170

    Jun-He Technology Ltd. ERP POS - Stored XSS-1

    Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate…

    Jun-He Technology ERP POS