← Database

CVE-2021-40637

MEDIUM CVSS: 6.1 Published: 2022-03-03 Modified: 2026-06-17

Description

OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user.

Affected Platforms

Os4Ed Opensis

Weakness Type

CWE-79

References