CVE

CVE-2021-45092

9.8

CVSS

Description

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 26, 2026View on NVD →

S4E scanner

CVE-2021-45092 Scanner

CVE-2021-45092 scanner - Cross-Site Scripting (XSS) vulnerability in Thinfinity VirtualUI

Used 2.4k times · 3.3k assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.