Skip to content
OpenAdvisories

Vendor

Xorcom

4 known vulnerabilities.

Products

CompletePBX 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-30006

    Xorcom CompletePBX <= 5.2.35 Reflected Cross-Site Scripting

    Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This issue affects CompletePBX: all versions up to and including 5.2.35

    Xorcom CompletePBX
  • Medium 6.5
    CVE-2025-2292 Public exploit

    Xorcom CompletePBX <= 5.2.35 Authenticated File Disclosure

    Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup and Restore functionality.This issue affects CompletePBX: through 5.2.35.

    Xorcom CompletePBX