CVE Intelligence

Dovestones Ad Phonebook vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dovestones Ad Phonebook: 1 record(s), with affected versions and fixes.
cpe:2.3:a:dovestones:ad_phonebook

CVE-2026-31013 Medium · 6.1 CWE-79 Apr 21, 2026
Cross-site Scripting (XSS) in Dovestones Ad Phonebook
Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim's browser.