VULNERABILITY INTELLIGENCE

CVE-2021-37470

CVSS score5.4 MEDIUM

EPSS probability0.58%

CISA KEVNot currently listed

Published2021-07-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.

Weakness classification

nvd@nist.gov: CWE-79

Primary references

cve@mitre.org — Exploit, Third Party Advisory
cve@mitre.org — Product
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Product