Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qxm-55c8-38q5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4.

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4.

EPSS

Процентиль: 53%
0.00306
Низкий

Связанные уязвимости

CVSS3: 4.8
nvd
почти 6 лет назад

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4.

EPSS

Процентиль: 53%
0.00306
Низкий