CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

CVE-2023-37190

CVE-2023-37190 affects Issabel issabel-pbx v4.0.0-6, where a stored XSS in the New Virtual Fax feature allows injection of scripts via crafted payloads into the Virtual Fax Name or Caller ID Name fields. The underlying issue is a lack of proper input sanitization in these parameters, leading to e...