Skip to content
OpenAdvisories

Vendor

Goautodial

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.4

    GOautodial 4.0 - 'CreateEvent' Persistent Cross-Site Scripting

    GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the event title parameter. Attackers can exploit the CreateEvent.php endpoint by sending crafted POST requests with…

  • Medium 6.4

    GOautodial 4.0 - Persistent Cross-Site Scripting

    GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through message subjects. Attackers can craft messages with embedded JavaScript that will execute when an administrator reads …