Cross site scripting

2021-07-2521:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.8%

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).

CPENameOperatorVersion
axon_pbxle2.22

CPE	Name	Operator	Version
	axon_pbx	le	2.22

References

github.com/0xfml/poc/blob/main/NCH/Axon_2.22_XSS.md

www.nch.com.au/pbx/index.html

0.001 Low

EPSS

Percentile

24.8%

Related for PRION:CVE-2021-37462