A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote malicious users to inject arbitrary web script or HTML via the redirect parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fusionpbx fusionpbx 4.4.1 |