Description
Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel.
This issue affects CompletePBX: all versions up to and including 5.2.35
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xorcom | CompletePBX | ≤ 5.2.35 | — |
References
- https://vulncheck.com/advisories/completepbx-reflected-xss third-party-advisory
- https://www.xorcom.com/new-completepbx-release-5-2-36-1/ vendor-advisory