1. Home
  2. CVE Database
  3. CVE-2021-26832
MEDIUM · 6.1

CVE-2021-26832

Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or...

Vulnerability Description

Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Priority-SoftwarePriority Enterprise Management System8.00

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2021-26832?

CVE-2021-26832 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or...

How severe is CVE-2021-26832?

CVE-2021-26832 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-26832?

Check the references section above for vendor advisories and patch information. Affected products include: Priority-Software Priority Enterprise Management System.