CVE-2019-19385

A cross-site scripting XSS vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the appuuid parameter...

CVE-2019-19385

CVE-2019-19385 describes a cross-site scripting (XSS) vulnerability in FusionPBX 4.4.1, specifically in the file app/dialplans/dialplans.php. The issue allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter. The connected sources confirm the affected product/ver...

PT-2019-15832

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.4.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the app uuid parameter in the "app/dialplans/dialplans.php" endpoint. Recommendations For FusionPBX version...

CVE-2019-19385: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the appuuid parameter...