CVE-2020-21053: XSS
Published May 20, 2021
·Updated
Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "querystring" variable in app\devices\deviceimports.php.
Affected Software
1 affected component
FusionPBX Fusionpbx=4.5.7
Remediation
Event History
May 20, 2021
CVE Published
via MITRE·02:47 PM
Data Sourced
via MITRE·02:47 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-21053?
CVE-2020-21053 is classified as a medium severity vulnerability.
2
How do I fix CVE-2020-21053?
To fix CVE-2020-21053, sanitize the 'query_string' variable in app\devices\device_imports.php to prevent script injection.
3
Who is affected by CVE-2020-21053?
Users of FusionPBX version 4.5.7 are affected by CVE-2020-21053.
4
What type of vulnerability is CVE-2020-21053?
CVE-2020-21053 is a Cross Site Scripting (XSS) vulnerability.
5
Can CVE-2020-21053 be exploited remotely?
Yes, CVE-2020-21053 can be exploited by remote malicious users.