Security Advisory
CVE-2021-3294
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.