CVE-2025-30004 — Xorcom CompletePBX <= 5.2.35 Task Scheduler Authenticated Command Injection
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. …
Published: 2025-03-31 · CVSS: 8.8 · CVSS 3.1
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7