Medium severity6.1NVD Advisory· Published Mar 31, 2025· Updated Jun 17, 2026
CVE-2025-30006
CVE-2025-30006
Description
Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel.
This issue affects CompletePBX: all versions up to and prior to 5.2.35
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<5.2.35+ 1 more
- (no CPE)range: <5.2.35
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- vulncheck.com/advisories/completepbx-reflected-xssnvdThird Party Advisory
- www.xorcom.com/new-completepbx-release-5-2-36-1/nvdRelease Notes
News mentions
0No linked articles in our index yet.