cvedb.io
CVE-2025-30006
MEDIUM · CVSS 6.1
EPSS exploitation probability: 0%
Published 2025-03-31T17:15:42.020 · Last modified 2026-06-17T09:08:01.700

Summary

Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This issue affects CompletePBX: all versions up to and prior to 5.2.35

Affected products

xorcom — completepbx

Does this affect you?

Add your gear to cvedb and we'll alert you only when xorcom ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.