ICTBroadcast PHP-CGI/PHP-FPM cross-site scripting vulnerability

The ICTBroadcast PHP-CGI/PHP-FPM version contains a cross-site scripting vulnerability. This flaw arises because the editFormextensionusername parameter in the login.php endpoint is reflected without proper filtering, making it susceptible to cross-site scripting attacks. Such attacks could allow...