cve.bz

CVE-2021-44321

5.0 mediumEPSS 0.3%

Medium (5.0) in mini-inventory-and-sales-management-system project mini-inventory-and-sales-management-system. EPSS 0.3% chance of exploitation in the next 30 days.

Mini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery (CSRF), where an attacker can update/delete items in the inventory. The attacker must be logged into the application create a malicious file for updating the inventory details and items.

Severity

CVSS 3.1

5.0 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE
CWE-352
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON