Security Advisory

CVE-2019-16991

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-10-21 15:45:12

Last updated 2024-08-05 01:24:48

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In FusionPBX up to v4.5.7, the file app\edit\filedelete.php uses an unsanitized "file" variable coming from the URL, which is reflected in HTML, leading to XSS.

← Browse all CVEs View on cve.org ↗