Description
Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xml_modes.xml endpoint
Advisories 1
- WID-SEC-2024-0942 innovaphone PBX: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Apr 21, 2024