2 matches found
CVE-2019-16982
In FusionPBX up to v4.5.7, the file app\accesscontrols\accesscontrolnodes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...
6.1CVSS0.00803EPSS
SaveExploits0References2
CVE-2019-16982: Improper Neutralization of Input During Web Page Generation
In FusionPBX up to v4.5.7, the file app\accesscontrols\accesscontrolnodes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...
6.1CVSS6.2AI score0.00803EPSS
SaveExploits0References2
20