VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 6, 2023· Updated Jul 9, 2026

CVE-2021-35377

CVE-2021-35377

Description

Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidial.php, agc/vicidial-greay.php, and /vicidial/KHOMP_admin.php parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Vicidial/Vicidialcpe-rescue6 versions
    (expand)+ 5 more
    • (no CPE)
    • cpe:2.3:a:vicidial:vicidial:2.9-401c:140612-1626:*:*:*:*:*:*
    • cpe:2.3:a:vicidial:vicidial:2.10-415c:140918-1606:*:*:*:*:*:*
    • cpe:2.3:a:vicidial:vicidial:2.14-597c:191114-0949:*:*:*:*:*:*
    • cpe:2.3:a:vicidial:vicidial:2.14-610c:200528-2239:*:*:*:*:*:*
    • (no CPE)range: 2.14-610c, 2.10-415c

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.