medium6.1
CVE-2025-30006
Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel.
Impact
Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This issue affects CompletePBX: all versions up to and including 5.2.35
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xorcom | Completepbx | before 5.2.36.1 |