← Database

CVE-2025-30006

MEDIUM CVSS: 6.1 Published: 2025-03-31 Modified: 2026-06-17

Description

Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This issue affects CompletePBX: all versions up to and prior to 5.2.35

Affected Platforms

Xorcom Completepbx

Weakness Type

CWE-79

References