CVE-2024-28722 | Innovaphone PBX 12r2/13r3/14r1 /CMD0/xml_modes.xml query cross site scripting

A vulnerability has been found in Innovaphone PBX 12r2/13r3/14r1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /CMD0/xml_modes.xml. The manipulation of the argument query leads to cross site scripting.

This vulnerability is known as CVE-2024-28722. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.