CVE-2019-19851

2020-03-1616:15:12

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Debug/Test page of the Superfecta module at the admin/config.php?display=superfecta URI. This affects Superfecta through 13.0.4.7, 14.x through 14.0.24, and 15.x through 15.0.2.20.

CPENameOperatorVersion
coreeqrelease/12.0.10
coreeqrelease/2.10.1.2
coreeqrelease/14.0.18.6
coreeqrelease/13.0.77
coreeqrelease/13.0.5
coreeqrelease/14.0.18.19
coreeqrelease/13.0.122
coreeqrelease/14.0.18.26
coreeqrelease/14.0.18.12
coreeqrelease/13.0.120.8

Name	Operator	Version
core	eq	release/12.0.10
core	eq	release/2.10.1.2
core	eq	release/14.0.18.6
core	eq	release/13.0.77
core	eq	release/13.0.5
core	eq	release/14.0.18.19
core	eq	release/13.0.122
core	eq	release/14.0.18.26
core	eq	release/14.0.18.12
core	eq	release/13.0.120.8