CVE-2019-16978

In FusionPBX up to v4.5.7, the file app\devices\devicesettings.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...

CVE-2019-16978

In FusionPBX up to v4.5.7, the file app\devices\devicesettings.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...

CVE-2019-16978

CVE-2019-16978 affects FusionPBX up to v4.5.7, where the file app\devices\device_settings.php reads an unsanitized id from the URL and reflects it twice in HTML, causing XSS. The issue arises from insufficient input sanitization in the device_settings component. Impact is client-side script execu...