CVE-2021-40310: OS4ED Opensis

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

OpenSIS Community Edition version 8.0 is affected by a cross-site scripting (XSS) vulnerability in the TakeAttendance.php via the cp_id_miss_attn parameter.

Affected products

• OS4ED Opensis: version 8.0 only

Published 2021-09-24. Last modified 2026-06-17.