In short
- CVE-2021-37459 is a MEDIUM (CVSS 5.4) vulnerability affecting axon pbx (nchsoftware).
- Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.9% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| axon pbx | ≤ 2.22
| No fix yet |
Description
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free