CVE-2019-16983
21.10.2019, 16:15
In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function (called by several pages of the interface), which uses an unsanitized "param" variable constructed partially from the URL args and reflected in HTML, leading to XSS.
| Vendor | Product | Version |
|---|---|---|
| fusionpbx | fusionpbx | 𝑥 ≤ 4.5.7 |
𝑥
= Vulnerable software versions
References