CVE-2021-26832

https://notcve.org/view.php?id=CVE-2021-26832

14 Apr 2021 — Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. Una vulnerabilidad de tipo Cross Site Scripting (XSS) en el formulario de la página "Reset Password" de Priority Enterprise Management System versión v8.00, permite a atacantes ejecutar javascript en nombre de la víctima mediante el envío de una URL maliciosa o dirigie... • https://github.com/NagliNagli/CVE-2021-26832 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •