NCH IVM Attendant Cross-Site Scripting Vulnerability (CNVD-2021-55902)

NCH IVM Attendant is a complete voicemail, call attendant and IVR solution for Windows. a security vulnerability exists in NCH IVM Attendant due to a lack of comprehensive input validation, which can be exploited by an authenticated attacker to inject a JavaScript cross-site scripting payload into a field in IVM to create stored or reflected XSS conditions.