CVE-2021-37460

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /planprop?id= reflected...

CVE-2021-37460

The CVE-2021-37460 issue affects NCH Axon PBX, specifically versions v2.22 and earlier. It is a reflected Cross-Site Scripting (XSS) vulnerability reachable via the /planprop?id= parameter, caused by inadequate filtering of input data. The consequence is client-side code execution if an attacker ...