Cross Site Scripting Vulnerability in Attendance Management System by XYZ Corp
CVE-2021-44598

6.1MEDIUM

Key Information:

Vendor: Attendance Management System Project
Status: Attendance Management System
Vendor: CVE Published:; 26 December 2021

🔔 Create Attendance Management System Project Vulnerability Alert

What is CVE-2021-44598?

The Attendance Management System 1.0 from XYZ Corp is susceptible to a Cross Site Scripting (XSS) vulnerability. This issue arises when the FirstRecord request parameter's value is improperly included in the HTML tag attribute, allowing attackers to exploit this weakness. By employing an XSS-reflected attack, an attacker can manipulate the system, potentially gaining unauthorized access to the admin account and compromising sensitive user information.

References

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2...

x_refsource_MISC

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 26, 2021
Vulnerability Reserved
Dec 6, 2021

CVE-2021-44598 Data

JSON