Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-23387
HistoryJan 19, 2024 - 4:15 a.m.

Cross site scripting

2024-01-1904:15:00
PRIOn knowledge base
www.prio-n.com
5
fusionpbx
cross-site scripting
vulnerability
remote attacker
administrative privilege
arbitrary script
web browser
user logging in

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may be executed on the web browser of the user who is logging in to the product.

CPENameOperatorVersion
fusionpbxlt5.1.0

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

Related for PRION:CVE-2024-23387