Description
In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.
Unscored
CVE-2021-37470
EUVD-2021-24035GHSA-mjf7-37pm-5wf4
In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify …
Published Jul 25, 2021 · Updated Aug 4, 2024 · Assigned by mitre