NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55900)

NCH Axon PBX is a set of virtual telephone exchange software used in business environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A security vulnerability exists in NCH Axon PBX due to the lack of comprehensive input validation, which can be exploited by an authenticated attacker to inject JavaScript cross-site scripting payloads into fields in Axon PBX to create stored or reflected XSS conditions .