CVE-2021-43695: XSS
issabelPBX version 2.11 is affected by a Cross Site Scripting (XSS) vulnerability. In file page.backuprestore.php, the exit function will terminate the script and print the message to the user. The message will contain $REQUEST without sanitization, then there is a XSS vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43695?
CVE-2021-43695 is classified as a medium severity Cross Site Scripting (XSS) vulnerability.
How do I fix CVE-2021-43695?
To fix CVE-2021-43695, ensure that user inputs are properly sanitized before being outputted in the application.
Which versions of Issabel PBX are affected by CVE-2021-43695?
CVE-2021-43695 affects Issabel PBX version 2.11.
What impact does CVE-2021-43695 have on Issabel PBX?
CVE-2021-43695 can allow attackers to execute arbitrary JavaScript in the context of the user's session by exploiting the XSS vulnerability.
Is CVE-2021-43695 a persistent vulnerability?
CVE-2021-43695 is a non-persistent XSS vulnerability, meaning the attack does not persist between different sessions.