← Back

Crs Retail Store

crs_retail_store

Vendor: Epicor • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Epicor
1Crs Retail Store
May 13, 2026
Sep 6, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell.