CVE-2021-40637

OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php

published March 3, 2022

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00786 · 55.6th percentile
Published
2022-03-03T14:04Z
EPSS history
Timeline
  • 03 MAR 14:04Z
    OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php
    cvelistv5