CVE-2019-19385

CVE-2019-19385 describes a cross-site scripting (XSS) vulnerability in FusionPBX 4.4.1, specifically in the file app/dialplans/dialplans.php. The issue allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter. The connected sources confirm the affected product/ver...