PT-2021-10576

Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.5.7 Description: A Cross Site Scripting XSS issue exists, allowing remote malicious users to inject arbitrary web script or HTML via an unsanitized query string variable in the appdevicesdevice imports.php file...

PT-2019-14896

Name of the Vulnerable Software and Affected Versions FusionPBX versions up to 4.5.7 Description The issue concerns the use of an unsanitized query string variable in the file appdestinationsdestination imports.php, which is reflected in HTML and leads to a cross-site scripting XSS issue...

PT-2019-14897

Name of the Vulnerable Software and Affected Versions FusionPBX versions prior to 4.5.8 Description The issue concerns the use of an unsanitized query string variable in the file appextensionsextension imports.php, which is reflected in HTML. This leads to a cross-site scripting XSS issue, allowi...