CVE-2019-19366: XSS
Published Nov 27, 2019
·Updated
A cross-site scripting (XSS) vulnerability in app/xmlcdr/xmlcdrsearch.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.
Affected Software
1 affected component
FusionPBX Fusionpbx=4.4.1
Remediation
Event History
Nov 27, 2019
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19366?
CVE-2019-19366 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2019-19366?
To fix CVE-2019-19366, update FusionPBX to a version later than 4.4.1 that addresses this vulnerability.
3
Who is affected by CVE-2019-19366?
CVE-2019-19366 affects users running FusionPBX version 4.4.1.
4
What type of attack does CVE-2019-19366 enable?
CVE-2019-19366 enables remote attackers to perform cross-site scripting (XSS) attacks.
5
What is the impact of exploiting CVE-2019-19366?
Exploiting CVE-2019-19366 allows attackers to inject arbitrary web scripts or HTML into the application.