CVE-2018-19919

2018-12-0620:29:00

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element.

CPENameOperatorVersion
pixelimityeq1.0

CPE	Name	Operator	Version
	pixelimity	eq	1.0

References

github.com/pixelimity/pixelimity/issues/19