VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Mar 16, 2020· Updated Jun 17, 2026

CVE-2019-19852

CVE-2019-19852

Description

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Freepbx/Freepbx2 versions
    cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*range: >=13.0,<=13.0.26.9
    • (no CPE)range: 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4
  • Sangoma/FreePBXdescription
  • Freepbx/PBXactllm-create
    Range: 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.