CVE-2021-26832

MEDIO 6.1CVE-2021-26832 · Published 14/04/2021 · updated 17/06/2026

En resumen

CVE-2021-26832 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a priority enterprise management system (priority-software).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.85%, mayor que el 58.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
priority enterprise management system priority-software	`= 8.00`	No fix yet

Description

Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site.

References

NagliNagli/CVE-2021-26832 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free