FreePBX 跨站脚本漏洞

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. A cross-site scripting vulnerability exists in FreePBX voicemail versions prior to 14.0.6.25, which stems from ...

PT-2022-11698 · Freepbx · Freepbx

Name of the Vulnerable Software and Affected Versions: FreePBX versions prior to 14.0.6.25 Description: A vulnerability was found in FreePBX voicemail, affecting an unknown functionality of the file page.voicemail.php. The manipulation leads to cross site scripting. The attack can be launched...