← Database

CVE-2021-37524

MEDIUM CVSS: 6.1 Published: 2022-07-01 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php.

Affected Platforms

Fusionpbx Fusionpbx

Weakness Type

CWE-79

References