CVE-2021-44598

Published: Dec 26, 2021Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. The value of the FirstRecord request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The attacker can access the system, by using the XSS-reflected method, and then can store information by injecting the admin account on this system.

Affected (1)

Products: Attendance Management System Project: Attendance Management System

Attendance Management System Project

1 product

Attendance Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Attendance Management System Project Attendance Management System	Version 1.0

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44598

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44598

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.