All packages
Issabel issabel-pbx v.4.0.0-6 vulnerabilities
3 known CVE vulnerabilities in Issabel issabel-pbx v.4.0.0-6, translated and rated.
- CVE-2023-37190Medium
A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature.
- CVE-2023-37191Medium
A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters.
- CVE-2023-34839Medium
A CSRF vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to create new user function in the application.