Cross site scripting

2023-07-1102:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

issabel pbx

vulnerability

arbitrary execution

name field

prefix field

0.001 Low

EPSS

Percentile

23.1%

JSON

A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module.