CVE-2021-41434: ORETNOM23 Expense Management System

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php.

Affected products

• ORETNOM23 Expense Management System: version 1.0 only

Published 2022-09-28. Last modified 2026-06-17.