Lucene search
MitreCVELIST:CVE-2019-16988HistoryOct 21, 2019 - 3:49 p.m.
CVE-2019-16988
2019-10-2115:49:28
mitre
www.cve.org
5
EPSS
0.001
Percentile
36.1%
In FusionPBX up to v4.5.7, the file app\basic_operator_panel\resources\content.php uses an unsanitized “eavesdrop_dest” variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS.
Related
prion
prion
Cross site scripting
2019-10-21 16:15:00
cve
cve
CVE-2019-16988
2019-10-21 16:15:18
nvd
nvd
CVE-2019-16988
2019-10-21 16:15:18