CVE-2019-25090

A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Views Handler. The manipulation of the argument dataurl leads to cross site scripting. The attack may be launched remotely. Upgrading...

Cross site scripting

A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Views Handler. The manipulation of the argument dataurl leads to cross site scripting. The attack may be launched remotely. Upgrading...

CVE-2019-25090

FreePBX arimanager (Views Handler) up to version 13.0.5.3 is affected by a cross‑site scripting vulnerability triggered by manipulating the dataurl argument. The issue can be exploited remotely via the network and may impact confidentiality and integrity (low) with no availability impact. The fix...