CVE-2021-41557: Sofico Miles Rich Internet Application

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting (XSS). An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section (or change existing work orders). The XSS payload is in the work order number.

Affected products

• Sofico Miles Rich Internet Application: version 2020.2 only

Published 2021-12-15. Last modified 2026-06-17.