Approved changes feed: RSS · Atom
cpe:2.3:a:jun-he_technology_ltd.:erp_pos:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jun He Technology Ltd. (4b44480e-bd31-506a-9a37-309c0fc0c753) |
|---|---|
| Product | Erp Pos (9d1aad3e-60d1-548f-9733-b05e6acd31da) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-30171 |
vulnerable | 2026-06-08 05:31:47.093870 |
Jun-He Technology Ltd. ERP POS - Stored XSS-2
MEDIUM (4.6)
Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
Published: 2021-05-07T09:30:24.945Z
Updated: 2024-09-17T01:35:45.061Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30170 |
vulnerable | 2026-06-08 05:31:47.092512 |
Jun-He Technology Ltd. ERP POS - Stored XSS-1
MEDIUM (4.6)
Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
Published: 2021-05-07T09:30:24.312Z
Updated: 2024-09-16T23:21:33.023Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.