NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the productβs blacklist IP address failing to properly filter special characters in input data, and could be exploited by attackers to execute client-side code.