Threats tagged 'ghsa-44f9-hq28-4gf9'

CVE-2026-101141 is a medium severity cross-site scripting (XSS) vulnerability in Eleveo Call Recording Software version 9.7.0. The flaw exists in the /callrec/audio.jsp file within the Play Audio Page component, where manipulation of the viewRoleId or cfType arguments can lead to XSS. The vulnerability can be exploited remotely and requires low privileges with partial user interaction. The vendor has not responded to the disclosure, and no patch or remediation is currently confirmed.