Security Advisory

CVE-2021-47743

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-31 18:40:54
Last updated 2026-05-24 01:37:01
Assigner VulnCheck
CVSS score 5.1
State PUBLISHED

Description

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.