| Package | Affected versions | Patched versions |
|---|---|---|
| fusionpbx | < 5.0.1 | 5.0.1 |
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free