CVE-2021-41434

A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of…

Medium · published September 28, 2022

CVSS v3.1
5.4
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00716 · 53.2th percentile
Published
2022-09-28T16:39Z
EPSS history
Timeline
  • 28 SEP 16:39Z
    A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of…
    cvelistv5