CVE-2021-26303

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 29, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-263045.4PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.CVE-2021-263059.8An issue was discovered in Deserializer::read_vec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain accesCVE-2021-263067.5An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods.CVE-2021-263075.5An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It allows __cpuid_count() calls even if the processor does not supportCVE-2021-263087.5An issue was discovered in the marc crate before 2.0.0 for Rust. A user-provided Read implementation can gain access to the old contents of CVE-2021-263093.3Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure PeCVE-2021-263107.5In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.CVE-2021-263117.2In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which cCVE-2021-263125.5Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory iCVE-2021-263135.5Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative CVE-2021-263145.5Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculativeCVE-2021-263157.8When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient
CVE-2021-26303: Medium severity, CVSS 6.1 | Vulnix