VULNERABILITY INTELLIGENCE

CVE-2021-41434

CVSS score5.4 MEDIUM

EPSS probability0.89%

CISA KEVNot currently listed

Published2022-09-28

Last modified2026-06-17

Description

A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php.