Vulnerability Details CVE-2025-30004
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user.
This issue affects CompletePBX: all versions up to and prior to 5.2.35
Exploit prediction scoring system (EPSS) score
EPSS Score 0.561
EPSS Ranking 98.0%
CVSS Severity
CVSS v3 Score 9.1
References
Products affected by CVE-2025-30004
-
cpe:2.3:a:xorcom:completepbx:*