Security Advisory
CVE-2020-21054
6.1
MEDIUM
Vulnerability Description
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php.
Published Date
May 20, 2021
Official Source
NIST NVD Advisory