← Database

CVE-2021-41434

MEDIUM CVSS: 5.4 Published: 2022-09-28 Modified: 2026-06-17

Description

A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php.

Affected Platforms

Oretnom23 Expense Management System

Weakness Type

CWE-79, CWE-79

References