CVE-2020-21054

FusionPBX 4.5.7 contains a Cross-Site Scripting (XSS) vulnerability exploitable via an unsanitized variable f in app/vars/vars_textarea.php. Affects multiple CVE mirrors (CVE-2020-21054) with consistent description across NVD, Red Hat, CNVD and other feeds. Impact is to inject arbitrary web scrip...