Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
Published July 25, 2021.
Nchsoftware Axon Pbx