CVE-2019-11359

2019-04-2000:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.5%

JSON

Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter.

CPENameOperatorVersion
i-librarianeq4.5
i-librarianeq3.3
i-librarianeq4.8
i-librarianeq4.1
i-librarianeq3.1
i-librarianeq3.4
i-librarianeq3.2
i-librarianeq3.0
i-librarianeq4.9
i-librarianeq4.6

Name	Operator	Version
i-librarian	eq	4.5
i-librarian	eq	3.3
i-librarian	eq	4.8
i-librarian	eq	4.1
i-librarian	eq	3.1
i-librarian	eq	3.4
i-librarian	eq	3.2
i-librarian	eq	3.0
i-librarian	eq	4.9
i-librarian	eq	4.6

Rows per page:

1-10 of 191

References

github.com/mkucej/i-librarian/issues/138