CVE-2021-37524

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...

PT-2022-10656

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.5.26 Description A Cross Site Scripting XSS issue allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized path parameter in the "resources/login.php" endpoint. Recommendations For...

CVE-2021-37524: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...