Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-55891
HistoryJul 26, 2021 - 12:00 a.m.

NCH IVM Attendant Cross-Site Scripting Vulnerability

2021-07-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
nch ivm attendant
cross-site scripting
vulnerability
mailbox name
handling
attackers
client-side code
security

EPSS

0.001

Percentile

22.7%

NCH IVM Attendant is an application of nch. A cross-site scripting vulnerability exists in NCH IVM Attendant, which stems from the product’s Mailbox name failing to properly filter incoming data for special characters, and could be exploited by attackers to execute client-side code.

EPSS

0.001

Percentile

22.7%

Related for CNVD-2021-55891