CVE-2021-37461

CVE-2021-37461 affects NCH Axon PBX, a virtual telephone switch, with a reflected XSS in /extensionsinstruction?id= where input is not properly filtered of special characters. Affects v2.22 and earlier. The provided documents do not specify a remediation version or patch status, exploit details, ...

PT-2021-21676

Name of the Vulnerable Software and Affected Versions NCH Axon PBX versions 2.22 and earlier Description A Cross Site Scripting XSS issue exists, allowing for reflected XSS attacks via the "/extensionsinstruction?id=" endpoint. This can potentially lead to malicious script execution...

CVE-2021-37461: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= reflected...