CVE-2021-44598

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p52

Published

Dec 26, 2021 (Dec 26, 2021)

Modified

Jun 17, 2026

Description

Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. The value of the FirstRecord request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The attacker can access the system, by using the XSS-reflected method, and then can store information by injecting the admin account on this system.

Vendors: attendance management system project
Products: attendance management system
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.