CyberRota Analysis
AI-GeneratedA stored cross-site scripting (XSS) vulnerability in Sangoma Switchvox SMB Edition 8.3 allows authenticated users to inject malicious JavaScript through the voicemail notification template functionality. This flaw can lead to unauthorized actions or data exposure for users who view the compromised templates. Organizations using this version of Switchvox should prioritize remediation to protect against potential exploitation.
Original NVD Description
A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicemail notification template functionality. The submit_modify_voicemail_template endpoint fails to properly sanitize HTML content supplied by authenticated users, allowing malicious JavaScript supplied through the template_text parameter to be stored server-side and subsequently rendered to other users.