PT-2023-12261

Name of the Vulnerable Software and Affected Versions VICIdial versions 2.10-415c through 2.14-610c Description A Cross Site Scripting issue allows attackers to execute arbitrary code via the "/agc/vicidial.php", "agc/vicidial-greay.php", and "/vicidial/KHOMP admin.php" API endpoints. The...

CVE-2021-35377

Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidial.php, agc/vicidial-greay.php, and /vicidial/KHOMPadmin.php parameters...