CVE-2026-31013 in ADPhonebookinfo

Zusammenfassung

von MITRE • 21.04.2026

Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim's browser.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

MITRE

Reservieren

09.03.2026

Veröffentlichung

21.04.2026

Moderieren

akzeptiert

Eintrag

VDB-358501

CPE

bereit

EPSS

0.00043

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-31013
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-31013
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-31013/

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!