CVE-2021-30172: Junhetec Omnidirectional Communication System

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS (Cross-site scripting) attacks, additionally access and manipulate customer’s information.

Affected products

• Junhetec Omnidirectional Communication System: version 2007.1901 only

Published 2021-05-07. Last modified 2026-06-17.