Approved changes feed: RSS · Atom

cpe:2.3:a:junhetec:enterprise_resource_planning_point_of_sale_system:2013.10:*:*:*:*:*:*:*

part: a version: 2013.10 update: *

VendorJunhetec (f8baad7f-a10d-552c-b114-bcf913606307)
ProductEnterprise Resource Planning Point Of Sale System (2ce22047-a4d7-5bf1-a677-4304d670ae94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-30171 vulnerable 2026-06-08 05:31:47.094025 Jun-He Technology Ltd. ERP POS - Stored XSS-2
MEDIUM (4.6)
Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
Published: 2021-05-07T09:30:24.945Z
Updated: 2024-09-17T01:35:45.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30170 vulnerable 2026-06-08 05:31:47.093458 Jun-He Technology Ltd. ERP POS - Stored XSS-1
MEDIUM (4.6)
Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.
Published: 2021-05-07T09:30:24.312Z
Updated: 2024-09-16T23:21:33.023Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.