2021-12-16 03:07:32
mitre
PUBLISHED
Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.