4 matches found
EUVD-2019-7454
Malware in sbrugna...
6.1CVSS6.3AI score0.00655EPSS
SaveExploits0References3
Cross site scripting
In FusionPBX up to 4.5.7, the file app\extensions\extensionimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...
4.3CVSS6.2AI score0.00655EPSS
SaveExploits0References2Affected Software1
CVE-2019-16977
In FusionPBX up to 4.5.7, the file app\extensions\extensionimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...
6.1CVSS0.00655EPSS
SaveExploits0References2
CVE-2019-16977: Improper Neutralization of Input During Web Page Generation
In FusionPBX up to 4.5.7, the file app\extensions\extensionimports.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...
6.1CVSS6.2AI score0.00655EPSS
SaveExploits0References2
20