CVE-2019-19388: XSS
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplandetailedit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplanuuid parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19388?
The severity of CVE-2019-19388 is medium.
What is the affected software of CVE-2019-19388?
The affected software of CVE-2019-19388 is FusionPBX version 4.4.1.
How does CVE-2019-19388 work?
CVE-2019-19388 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the dialplan_uuid parameter in the app/dialplans/dialplan_detail_edit.php file.
How can I fix CVE-2019-19388?
To fix CVE-2019-19388, update FusionPBX to a version that includes the fix, such as version 4.4.2 or later.
Where can I find more information about CVE-2019-19388?
You can find more information about CVE-2019-19388 in the references provided: [Reference 1](https://gist.github.com/xax007/28e7326acfae677be0b351216888e522), [Reference 2](https://github.com/fusionpbx/fusionpbx/commit/b584973e73a4d25be623c9748dd9817f69422ecc).