CVE-2021-44598 - CVE House
Back to Database
Status published Medium CVE-2021-44598

Attendance Management System 1.0 is affected by a Cross Site...

Vulnerability Description

Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. The value of the FirstRecord request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The attacker can access the system, by using the XSS-reflected method, and then can store information by injecting the admin account on this system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-44598

Credits & Attribution

No credits recorded in the NVD database.

References

More from attendance management system project

View All →
CVE-2021-45348
An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management...
High 7.5
CVE-2021-44280
attendance management system 1.0 is affected by a SQL injection...
Critical 9.8

Affected Vendor

attendance management system project

View all reports →

Affected Software

attendance management system
Vulnerable Versions:
1.0

Timeline

Official Publish: December 26th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.