Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NCH WebDictate 跨站脚本漏洞
Vulnerability Description
NCH WebDictate是一个应用软件。基于网络的听写记录、编辑和管理软件。 NCH WebDictate 中存在跨站脚本漏洞,该漏洞源于产品的 Recipient Name 字段未能正确验证用户数据,通过身份验证的攻击者可通过该漏洞添加或修改受影响的字段。以下产品及版本受到影响:NCH WebDictate v2.13。
CVSS Information
N/A
Vulnerability Type
N/A