CVE-2026-31013 in ADPhonebookinformación

Resumen

por MITRE • 2026-04-21

Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint. User-supplied input is reflected in the HTTP response without proper input validation or output encoding, allowing execution of arbitrary JavaScript in the victim's browser.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

MITRE

Reservar

2026-03-09

Divulgación

2026-04-21

Moderación

aceptado

Artículo

VDB-358501

CPE

listo

EPSS

0.00043

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-31013
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-31013
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-31013/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you know our Splunk app?

Download it now for free!