CVE-2023-37189

A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or…

published July 11, 2023

CVSS
—
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.9th percentile
Published
2023-07-11T00:00Z
EPSS history
Timeline
  • 11 JUL 00:00Z
    A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or…
    cvelistv5