CVE:CVE-2022-3503
CNNVD:CNNVD-202210-891
Purchase Order Management System是Carlo Montero个人开发者的一个采购订单管理系统。
Purchase Order Management System 1.0版本存在安全漏洞，该漏洞源于对参数“Name/Address/Contact person/Contact”的错误操作导致出现跨站点脚本漏洞。
solution:Upgrade purchase_order_management_system_project purchase_order_management_system to a higher version than 1.0,and avoid the version 1.0