CVE-2021-37458

Moderate 5.4

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).

Published July 25, 2021.

Affected software