← Database

CVE-2021-40542

MEDIUM CVSS: 6.1 Published: 2021-10-11 Modified: 2026-06-17

Description

Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user can inject and execute JavaScript code through the link_url parameter in Ajax_url_encode.php.

Affected Platforms

Os4Ed Opensis

Weakness Type

CWE-79

References