CVE-2020-21053

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-21053

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-21053.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-21053

Published

2021-05-20T15:15:07.517Z

Modified

2026-03-14T10:17:57.561255Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "querystring" variable in app\devices\deviceimports.php.

References

Affected packages

Git / github.com/fusionpbx/fusionpbx

Affected ranges

Type: GIT
Repo: https://github.com/fusionpbx/fusionpbx
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2ce613f1e9fe8ffab7a4cb9d1384444622285335

Type: GIT
Repo: https://github.com/fusionpbx/fusionpbx
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2ce613f1e9fe8ffab7a4cb9d1384444622285335

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-21053.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "4.5.7"
            }
        ]
    }
]