CVE-2021-30171: Junhetec Enterprise Resource Planning Point Of Sale System

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.

Affected products

• Junhetec Enterprise Resource Planning Point Of Sale System: version 2013.10 only

Published 2021-05-07. Last modified 2026-06-17.