CVE-2019-16983

In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function called by several pages of the interface, which uses an unsanitized "param" variable constructed partially from the URL args and reflected in HTML, leading to XSS...

CVE-2019-16983

In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function called by several pages of the interface, which uses an unsanitized "param" variable constructed partially from the URL args and reflected in HTML, leading to XSS...

CVE-2019-16983: Improper Neutralization of Input During Web Page Generation

In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function called by several pages of the interface, which uses an unsanitized "param" variable constructed partially from the URL args and reflected in HTML, leading to XSS...

PT-2019-13439

Name of the Vulnerable Software and Affected Versions WIKINDX versions prior to 5.8.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter in the getPagingStart function in core/lists/PAGING.php. Recommendations For...