An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component.
CWE-75 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)