CVE-2018-11552

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable application.

Score
CVSS 3.0 6.1 Medium
Status
Modified - cve@mitre.org
Published
2018-06-01
Last modified
2024-08-05
Weaknesses
CWE-79

Affected products

References

 
 
© AVABIS GmbH privacypolicy about