CVE-2021-40542: OS4ED Opensis

Medium severity, CVSS 6.1. EPSS: 3.2% chance of exploitation in the next 30 days.

Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user can inject and execute JavaScript code through the link_url parameter in Ajax_url_encode.php.

Affected products

• OS4ED Opensis: version 8.0 only

Published 2021-10-11. Last modified 2026-06-17.