CVE-2021-37449

creationtimestamp| type| source ---|---|--- 2021-07-26 02:40:39+00:00| seen| https://t.me/cibsecurity/26465...

CVE-2021-37449

CVE-2021-37449 affects NCH IVM Attendant (Windows) prior to or including v5.12. The vulnerability is a cross-site scripting (XSS) in the web interface, exploitable through the parameter /ogmlist?folder= on the IVR/attendant UI due to insufficient input validation. The CNVD/NVD entries describe an...

CVE-2021-37449

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...