CVE-2021-47743

Medium

Description

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.

SeverityMedium

CVSS6.1

Exploit probability21. percentile0.3%

ProductCOMMAX Biometric Access Control System

PublishedDec 31, 2025

First seenDec 31, 2025

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Vendor advisories

commax.com/

Affected products

Product	Affected versions	Fixed in
COMMAX Co., Ltd. COMMAX Biometric Access Control System	1.0.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.