CVE-2021-37459
Severity CVSS v4.0:
Pending analysis
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
25/07/2021
Last modified:
28/07/2021
Description
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
Impact
Base Score 3.x
5.40
Severity 3.x
MEDIUM
Base Score 2.0
3.50
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:nchsoftware:axon_pbx:*:*:*:*:*:*:*:* | 2.22 (including) |
To consult the complete list of CPE names with products and versions, see this page