CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.

Date published : 2021-12-15

https://github.com/cybelesoft/virtualui/issues/2