CVE-2019-16967

An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3. In the Manager module form html\admin\modules\manager\views\form.php, an unsanitized managerdisplay variable coming from the URL is reflected in HTML, leading to XSS. It can be requested via G...

PT-2019-14887

Name of the Vulnerable Software and Affected Versions FreePBX versions 13.x through 13.0.2.5 FreePBX versions 15.x through 15.0.5 FreePBX version 14.0.10.2 and earlier Description An issue was discovered in the Manager module, where an unsanitized managerdisplay variable from the URL is reflected...

CVE-2019-16967: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3. In the Manager module form html\admin\modules\manager\views\form.php, an unsanitized managerdisplay variable coming from the URL is reflected in HTML, leading to XSS. It can be requested via G...