CVE-2021-45092

CRITICAL CVSS: 9.8 Published: 2021-12-16 Modified: 2026-06-17

Description

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.

Affected Platforms

Cybelesoft Thinfinity Virtualui

Weakness Type

NVD-CWE-Other

References