CVE Intelligence

Vulnerabilidades do Dovestones Ad Phonebook

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Dovestones Ad Phonebook: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:dovestones:ad_phonebook

CVE-2026-31013 Média · 6.1 CWE-79 21/04/2026
Cross-site Scripting (XSS) em Dovestones Ad Phonebook
Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim's browser.