3 matches found
CVE-2019-16976
In FusionPBX up to 4.5.7, the file app\destinations\destinationimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
6.1CVSS6.8AI score0.00655EPSS
SaveExploits0References1
CVE-2019-16976
In FusionPBX up to 4.5.7, the file app\destinations\destinationimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
6.1CVSS6.8AI score
SaveExploits0References2
CVE-2019-16976
In FusionPBX up to 4.5.7, the file app\destinations\destinationimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to XSS...
6.3AI score0.00655EPSS
SaveExploits0References2
20