CVE Vulnerability

CWE-79

CVE-2021-37463

by

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).

CVE-2021-37464

by

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).

CVE-2021-37465

by

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).

CVE-2021-37466

by

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).

CVE-2021-37467

by

In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).

CVE-2021-37470

by

In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.