sahiloj/CVE-2023-37189

sahiloj/CVE-2023-37189

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
CVE-2023-37189 | Issabel PBX v.4.0.0-6 | Stored XSS in the billing feature.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-37189↗
4.8 MEDIUM—

A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module.