CVE-2018-14905

3CX Web server (version 15.5.8801.3) is affected by a Reflected XSS vulnerability in the api/CallLog TimeZoneName parameter. The connected CNVD/NVD entries confirm the affected product and vulnerability type but do not provide a remediation patch/version in the supplied documents. The exact root ...

CVE-2018-14905

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter...