CVE-2023-37190

A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted…

published July 11, 2023

CVSS
—
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00482 · 40.6th percentile
Published
2023-07-11T00:00Z
EPSS history
Timeline
  • 11 JUL 00:00Z
    A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted…
    cvelistv5