https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T06:49:46.732266+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-2495 CVE-2025-2495 — Stored Cross-Site Scripting (XSS) vulnerability in Softdial Contact Center 2026-10-19T06:49:46.750308+00:00

Affected: Sytel Ltd Softdial Contact Center

Stored Cross-Site Scripting (XSS) in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to upload XML files to the server with JavaScript code injected via the ‘/softdial/scheduler/save.php’ resource. The injected code will execute when the uploaded file is loaded via the ‘/softdial/scheduler/load.php’ resource and can redirect the victim to malicious sites or steal their login information to spoof their identity.