3 matches found
CVE-2019-16971
In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...
6.1CVSS6.8AI score
SaveExploits0References2
Cross site scripting
In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...
4.3CVSS6.2AI score0.00803EPSS
SaveExploits0References2Affected Software1
20