CVE

CVE-2021-45092

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.

Source: CVE-2021-45092

Exit mobile version