CVE-2021-37450

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...

CVE-2021-37450

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...

CVE-2021-37450: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= reflected...

PT-2021-21664

Name of the Vulnerable Software and Affected Versions NCH IVM Attendant versions 5.12 and earlier Description Cross Site Scripting XSS exists via the API endpoint "/ogmprop?id=" reflected. Recommendations For versions 5.12 and earlier, as a temporary workaround, consider restricting access to the...