← Database

CVE-2023-0486

MEDIUM CVSS: 6.1 Published: 2023-04-04 Modified: 2026-06-17

Description

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account via a malicious link. This is possible because the application is vulnerable to XSS.

Affected Platforms

Vitalpbx Vitalpbx

Weakness Type

CWE-79, CWE-79

References