| Package | Affected versions | Patched versions |
|---|---|---|
| fusionpbx | ≤ 4.5.7 |
An issue was discovered in FusionPBX up to 4.5.7. In the file app\conference_controls\conference_control_details.php, an unsanitized id variable coming from the URL is reflected in HTML on 2 occasions, leading to XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free