CVE-2021-37464: XSS
Published Jul 25, 2021
·Updated
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
Affected Software
1 affected component
Nchsoftware Quorum<=2.03
Event History
Jul 25, 2021
CVE Published
via MITRE·08:09 PM
Data Sourced
via MITRE·08:09 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37464?
CVE-2021-37464 is a vulnerability in NCH Quorum v2.03 and earlier that allows for XSS attacks through the Conference Description field.
2
What is the severity of CVE-2021-37464?
CVE-2021-37464 has a severity rating of medium, with a CVSS score of 5.4.
3
How does CVE-2021-37464 affect NCH Quorum?
CVE-2021-37464 affects NCH Quorum versions 2.03 and earlier, allowing for XSS attacks via the Conference Description field.
4
How can I fix CVE-2021-37464?
To fix CVE-2021-37464, upgrade to a version of NCH Quorum that is not affected by the vulnerability or apply any patches or security updates provided by the vendor.
5
What is XSS?
XSS (Cross-Site Scripting) is a type of security vulnerability that allows attackers to inject malicious scripts into webpages viewed by other users.