CVE-2021-37470

MEDIUM 5.4CVE-2021-37470 · Published 25/07/2021 · updated 17/06/2026

In short

CVE-2021-37470 is a MEDIUM (CVSS 5.4) vulnerability affecting webdictate (nchsoftware).
Chance of exploitation in the next 30 days (EPSS): 0.58%, higher than 48.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webdictate nchsoftware	`≤ 2.13`	No fix yet

Description

In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.

References

0xfml/poc · Exploit
nch.com.au/webdictate/index.html · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free