Cpe:2.3:a:asiainfo:bss_platform:*:*:*:*:*:*:*:*

AsiaInfo BSS Platform 9.2 before 9.2.38 contains a stored cross-site scripting (XSS) vulnerability in the menu icon upload function allowing for arbitrary JavaScript execution.