CVE-2021-37453

CVE-2021-37453 is a stored Cross Site Scripting (XSS) vulnerability in NCH Axon PBX up to v2.22 and earlier, triggered via the extension name (stored) . The root cause is inadequate filtering of special characters in input data, allowing injected script to run in the client context. Documented me...