CVE-2019-16969: XSS
Published Oct 21, 2019
·Updated
In FusionPBX up to 4.5.7, the file app\fifolist\fifointeractive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS.
Affected Software
1 affected component
FusionPBX Fusionpbx<=4.5.7
Remediation
Event History
Oct 21, 2019
CVE Published
via MITRE·08:37 PM
Data Sourced
via MITRE·08:37 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this FusionPBX vulnerability?
The vulnerability ID for this FusionPBX vulnerability is CVE-2019-16969.
2
What is the severity rating of CVE-2019-16969?
CVE-2019-16969 has a severity rating of 6.1 (medium).
3
What is the CWE category for this vulnerability?
The CWE category for CVE-2019-16969 is CWE-79 (Cross-Site Scripting).
4
How does CVE-2019-16969 affect FusionPBX?
CVE-2019-16969 affects FusionPBX up to version 4.5.7.
5
Is there a fix available for CVE-2019-16969?
Yes, a fix for CVE-2019-16969 is available. Please refer to the provided references for more information.