3 matches found
CVE-2019-16981
In FusionPBX up to v4.5.7, the file app\conferenceprofiles\conferenceprofileparams.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
6.1CVSS0.00803EPSS
SaveExploits0References2
CVE-2019-16981
In FusionPBX up to v4.5.7, the file app\conferenceprofiles\conferenceprofileparams.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
6.3AI score0.00803EPSS
SaveExploits0References2
CVE-2019-16981: Improper Neutralization of Input During Web Page Generation
In FusionPBX up to v4.5.7, the file app\conferenceprofiles\conferenceprofileparams.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
6.1CVSS6.2AI score0.00803EPSS
SaveExploits0References2
20