CVE-2018-12901

CVE-2018-12901 affects Mitel ST 14.2 (GA29, 19.49.9400.0) and earlier. The vulnerability is a reflected cross-site scripting (XSS) flaw in the signin.php page caused by insufficient input validation. An unauthenticated attacker could exploit this to execute arbitrary scripts in the victim’s brows...