EUVD-2018-6787

Malware in sbrugna...

Cross site scripting

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...

CVE-2018-14905: Improper Neutralization of Input During Web Page Generation

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...

PT-2018-12790

Name of the Vulnerable Software and Affected Versions 3CX version 15.5.8801.3 Description The issue concerns a Reflected XSS vulnerability. It affects the Web server in the specified version of 3CX, where the TimeZoneName parameter in the "api/CallLog" endpoint is vulnerable. Recommendations For...