issabel-pbx module vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.3%	CVE-2025-40648Issabel · XSS or 'Cross-site Scripting' Medium4.8EPSS 0.3%2025-10-01CVE Database V5CVE-2025-40648 Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'numero_conferencia' parameter in '/index.php?menu=conferencia'. EPSS 0.3%Vulnerability issabel-pbx module CWE-79	CVE Database V5	2025-10-01
Medium	5.1	EPSS 0.3%	CVE-2025-40647Issabel · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.3%2025-10-01CVE Database V5CVE-2025-40647 Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=address_book'. EPSS 0.3%Vulnerability issabel-pbx module CWE-79	CVE Database V5	2025-10-01

Page 1 of 1