Vendor
AsiaInfo BSS Platform 9.2 before 9.2.38 contains a stored cross-site scripting (XSS) vulnerability in the menu icon upload function allowing for arbitrary JavaScript execution.