CVE-2021-37459

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the customer name field stored...

CVE-2021-37459

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the customer name field stored...

CVE-2021-37459

CVE-2021-37459 affects NCH Axon PBX (v2.22 and earlier). The vulnerability is a stored cross-site scripting (XSS) flaw originating in the product’s customer name field, which fails to properly filter special characters, enabling client-side script execution. The issue is documented across multipl...