Cross site scripting

2013-11-2519:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.2%

JSON

Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter.

CPENameOperatorVersion
elastixeq2.3.0

CPE	Name	Operator	Version
	elastix	eq	2.3.0

References

packetstormsecurity.com/files/118454/Elastix-2.3.0-Cross-Site-Scripting.html

secunia.com/advisories/55739