Language: JavaScript
Label: safe
CWE: CWE-829 \u2014 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Code:
function updateCallLog({vm_id="", number="", duration="", status=""}="") {

    
    $.ajax({
        url: full_website_address + "/xhr/?module=customer-support&page=updateCallLog",
        type: "post",
        data:{
            vm_id: vm_id,
            number: number,
            duration: duration,
            status: status
        },
        success: function(status, data){}

    });

}