CVE-2021-37457

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the SipRule field stored...

CVE-2021-37457

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the SipRule field stored...

CVE-2021-37457

CVE-2021-37457 affects NCH Axon PBX v2.22 and earlier. The vulnerability is a stored Cross Site Scripting (XSS) via the SipRule field, caused by failure to properly filter incoming data for special characters. Documented impact is client-side code execution in affected deployments. Public exploit...