CVE-2021-3294

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php

published February 8, 2021

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02849 · 86.6th percentile
Published
2021-02-08T23:54Z
EPSS history
Timeline
  • 08 FEB 23:54Z
    CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php
    cvelistv5