CVE-2019-13970

2019-07-1906:15:10

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

JSON

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.

CPENameOperatorVersion
antswordeq2.0.0
antswordeq2.0.2
antswordeq2.0.5
antswordeq1.3.0
antswordeq1.2.1
antswordeq2.0.7
antswordeq1.0.0
antswordeq2.0.1
antswordeq2.0.7.1
antswordeq2.0.3

Name	Operator	Version
antsword	eq	2.0.0
antsword	eq	2.0.2
antsword	eq	2.0.5
antsword	eq	1.3.0
antsword	eq	1.2.1
antsword	eq	2.0.7
antsword	eq	1.0.0
antsword	eq	2.0.1
antsword	eq	2.0.7.1
antsword	eq	2.0.3