system
Describe <CVE-2021-3294>.
user
What is <CVE-2021-3294>?
assistant
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website..