PT-2021-21676

Name of the Vulnerable Software and Affected Versions NCH Axon PBX versions 2.22 and earlier Description A Cross Site Scripting XSS issue exists, allowing for reflected XSS attacks via the "/extensionsinstruction?id=" endpoint. This can potentially lead to malicious script execution...

CVE-2021-37461: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= reflected...