← Database

CVE-2021-47743

MEDIUM CVSS: 6.1 Published: 2025-12-31 Modified: 2026-06-17

Description

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.

Affected Platforms

Unknown

Weakness Type

CWE-79

References