CVE-2018-11552 There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacke...
MediumCVSS 6.1
EPSS 27.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nch axon pbx | = 2.02 | No fix listed |
References
- 20180530 CVE-2018-11552 AXON PBX 2.02 Cross Site Scripting exploit mailing-list third-party-advisory