Medium severity6.3NVD Advisory· Published Apr 22, 2024· Updated Jul 5, 2026

CVE-2024-28722

Description

Cross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xml_modes.xml endpoint

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Innovaphone/myPBXllm-create
Range: v.14r1, v.13r3, v.12r2

Patches

Vulnerability mechanics

References

innovaphone.comnvd
mypbx.comnvd
wiki.innovaphone.com/index.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000