← Back to browse · API

CVE-2021-41691

Severity
CRITICAL
CVSS
9.8
EPSS
0.01723
Risk score
39.8
CISA KEV
No
PoC
No
Published
2025-06-24
Modified
2025-06-25
First seen
2026-08-07
Aliases
EUVD-2021-28703, GHSA-GCFH-26RR-MGWJ
Products
n/a:n/a n/a
Sources
euvd EUVD-2021-28703

Description

A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" parameters in POST request sent to /TransferredOutModal.php.

References