CVE:CVE-2021-41434
CNNVD:CNNVD-202209-2880
Expense Management System是Carlo Montero个人开发者的一个费用管理系统。
Expense Management System 1.0 版本存在安全漏洞，该漏洞源于存在存储型跨站脚本(XSS)漏洞，该漏洞允许通过index.php执行任意JavaScript命令。
solution:Upgrade expense_management_system_project expense_management_system to a higher version than 1.0,and avoid the version 1.0