CVE-2025-2495

The CVE-2025-2495 issue affects Softdial Contact Center (Sytel Ltd.). It is a stored XSS vulnerability where an attacker can upload XML files via /softdial/scheduler/save.php; the injected JavaScript executes when the file is loaded through /softdial/scheduler/load.php, enabling potential redirec...

CVE-2025-2494

CVE-2025-2494 describes an unrestricted file upload vulnerability in Softdial Contact Center (Sytel Ltd.). An attacker can upload files via the /softdial/phpconsole/upload.php endpoint, which is protected by basic HTTP authentication, into a directory exposed by the web application. The uploaded ...

CVE-2025-2493

CVE-2025-2493 describes a path traversal vulnerability in Softdial Contact Center (Sytel Ltd.). The flaw arises from insufficient validation of the id parameter in the /softdial/scheduler/load.php endpoint, allowing an attacker to navigate outside the intended directory and potentially access sen...