Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09781
HistoryDec 29, 2021 - 12:00 a.m.

SLICAN WebCTI Cross-Site Scripting Vulnerability

2021-12-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
slican webcti
cross-site scripting
vulnerability
session hijacking
user credentials
telephony application
version 1.01 2015

EPSS

0.001

Percentile

37.9%

SLICAN WebCTI is a telephony application. SLICAN WebCTI version 1.01 2015 contains a cross-site scripting vulnerability that can be exploited by attackers to steal a user’s session by injecting malicious JavaScript code, which can lead to session hijacking and result in theft of the user’s credentials.

EPSS

0.001

Percentile

37.9%

Related for CNVD-2022-09781