# Cisco Vision Dynamic Signage Director has a cross-site scripting flaw

- Date: 2021-10-06
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2021-34742

NVD published a cross-site scripting vulnerability in Cisco Vision Dynamic Signage Director. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface on an affected device.

## Sources

- [CVE-2021-34742](https://nvd.nist.gov/vuln/detail/CVE-2021-34742) (NIST NVD)
- [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvdsd-xss-fvdj6HK](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvdsd-xss-fvdj6HK)

Page: https://signagelist.org/incidents/2021-10-cisco-vision-dynamic-signage-director-has-a/