CVE-2021-3294

Publication date

2021-02-08 23:54:38

Family

mitre

State

PUBLISHED

Description

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.