CVE-2021-43657

MEDIUM

Sourcecodetester SCMS 1.0 - XSS

Title source: llm
STIX 2.1

Description

A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields.

Exploits (1)

nomisec WRITEUP 3 stars
by c0n5n3d · poc
https://github.com/c0n5n3d/CVE-2021-43657

References (1)

Core 1

Scores

CVSS v3 5.4
EPSS 0.0025
EPSS Percentile 48.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-79
Status published
Products (1)
simple_client_management_system_project/simple_client_management_system 1.0
Published Dec 22, 2022
Tracked Since Feb 18, 2026