Description
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php.
Unscored
CVE-2020-21054
EUVD-2020-13833GHSA-6p53-6566-mqvv
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an uns…
Published May 20, 2021 · Updated Aug 4, 2024 · Assigned by mitre