PT-2019-14891 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions up to 4.5.7 Description: The issue concerns the use of an unsanitized contact uuid variable in the file appmessagesmessages thread.php, which is reflected in HTML on three occasions, leading to a cross-site scripting XSS...