CVE-2021-37454

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the line name stored...

CVE-2021-37454

CVE-2021-37454 affects NCH Axon PBX v2.22 and earlier. The issue is a stored XSS in the line name field, caused by insufficient filtering of special characters, enabling injection of client‑side scripts. Reported metrics indicate low to medium impact depending on vector/privileges, with user inte...

CVE-2021-37454

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the line name stored...