Product
A code injection vulnerability in the JSBridge component of Zhonglun CloudPos (up to 3.0.1.76) allows remote attackers to execute arbitrary code via the OpenLocalBrowser function.