CVE-2021-40637: OS4ED Opensis

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user.

Affected products

• OS4ED Opensis: version 8.0 only

Published 2022-03-03. Last modified 2026-06-17.