CVE-2018-14905

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:3cx:3cx_web_server:15.5.8801.3:*:*:*:*:*:*:*

Information

Published : 2018-08-03 11:29

Updated : 2018-09-26 10:29


NVD link : CVE-2018-14905

Mitre link : CVE-2018-14905


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

3cx

  • 3cx_web_server