4 matches found
CVE-2019-16979
In FusionPBX up to v4.5.7, the file app\contacts\contacturls.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...
6.1CVSS6.8AI score
SaveExploits0References2
CVE-2019-16979
In FusionPBX up to v4.5.7, the file app\contacts\contacturls.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...
6.1CVSS6.3AI score0.00824EPSS
SaveExploits0References2
CVE-2019-16979
CVE-2019-16979 affects FusionPBX up to version 4.5.7. The vulnerability is triggered by an unsanitized URL parameter in the file app\contacts\contact_urls.php , where the id value is reflected in HTML, causing a cross-site scripting (XSS) flaw. Public sources consistently describe the impact as c...
6.1CVSS6.2AI score0.00824EPSS
SaveExploits0References2Affected Software1
20