CVE-2021-26787

MediumCVSS 6.1

Published: 15/12/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.73%

50th percentile - higher than 50% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was found in Genesys Workforce Management 8.5.214.20 during record deletion via the Time-off parameter. An attacker can inject a malicious script that executes in the victim's browser.

Risk Assessment

The risk includes session hijacking, data theft, or unauthorized actions performed in the context of an administrator or manager session.

Recommendation

Immediately update Genesys Workforce Management to the latest version and apply input filtering for the Time-off parameter.

Original NVD description (English source)

A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record deletion) via the Time-off parameter.