title: Grand Vice info Co. webopac7 - Reflected XSS
description: Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thus unauthenticated attackers can inject JavaScript syntax remotely, and further perform reflective XSS attacks.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: webopac7
vendor: Grand Vice info Co.
versions:
status: affected, version: 7.1.20160701
status: affected, version: 1.8.20160701
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
]
solutions: Contact tech support from Grand Vice info Co.