Lucene search
MitreCVELIST:CVE-2019-16330HistoryOct 17, 2019 - 4:55 p.m.
CVE-2019-16330
2019-10-1716:55:11
mitre
www.cve.org
5
EPSS
0.001
Percentile
43.5%
In NCH Express Accounts Accounting v7.02, persistent cross site scripting (XSS) exists in Invoices/Sales Orders/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Sales Orders/Items/Customers/Quotes fields parameter to inject arbitrary JavaScript.
References
Related
prion
prion
Cross site scripting
2019-10-17 17:15:00
nvd
nvd
CVE-2019-16330
2019-10-17 17:15:09
cve
cve
CVE-2019-16330
2019-10-17 17:15:09