Security Advisory
CVE-2021-47885
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Multiple payment terminal versions contain non-persistent cross-site scripting vulnerabilities in billing and payment information input fields. Attackers can inject malicious script code through vulnerable parameters to manipulate client-side requests and potentially execute session hijacking or phishing attacks.