ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-21054”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-21054
Published
2021-05-20
CVSS:
6.1
ShadowTrackr CVSS:
0.5
Summary:
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php.