CVE-2021-28424

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in adminprofile.php.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 1, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-284277.8Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.CVE-2021-284289.8File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functiCVE-2021-284295.5Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause aCVE-2021-284348.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-284355.5Windows Event Tracing Information Disclosure VulnerabilityCVE-2021-284367.8Windows Speech Runtime Elevation of Privilege VulnerabilityCVE-2021-284375.5Windows Installer Information Disclosure VulnerabilityCVE-2021-284385.5Windows Console Driver Denial of Service VulnerabilityCVE-2021-284397.5Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-284407.0Windows Installer Elevation of Privilege VulnerabilityCVE-2021-284416.5Windows Hyper-V Information Disclosure VulnerabilityCVE-2021-284426.5Windows TCP/IP Information Disclosure Vulnerability
CVE-2021-28424: Medium severity, CVSS 5.4 | Vulnix