Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.7, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is using the product.Referenceshttps://www.jast-gakuen.com/products/unipa/https://jvn.jp/en/jp/JVN43215077/