Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-34c9-mcf5-3rp3

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6

Описание

An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3 (104997). The application fails to properly sanitize the portal parameter supplied to the invalid_browser and invalid_browser_login handlers. User-supplied data is reflected into JavaScript generated by the application, allowing attacker-controlled script execution within a victim's browser.

An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3 (104997). The application fails to properly sanitize the portal parameter supplied to the invalid_browser and invalid_browser_login handlers. User-supplied data is reflected into JavaScript generated by the application, allowing attacker-controlled script execution within a victim's browser.

EPSS

Процентиль: 25%
0.00327
Низкий

8.6 High

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
14 дней назад

An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3 (104997). The application fails to properly sanitize the portal parameter supplied to the invalid_browser and invalid_browser_login handlers. User-supplied data is reflected into JavaScript generated by the application, allowing attacker-controlled script execution within a victim's browser.

EPSS

Процентиль: 25%
0.00327
Низкий

8.6 High

CVSS4

Дефекты

CWE-79