CVE-2019-20518

2020-03-1918:15:15

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the project/ URI.

CPENameOperatorVersion
erpnexteq5.0.22
erpnexteq11.1.34
erpnexteq8.10.2
erpnexteq11.1.41
erpnexteq4.20.2
erpnexteq10.1.77
erpnexteq11.1.15
erpnexteq8.0.14
erpnexteq7.2.24
erpnexteq10.1.10

Name	Operator	Version
erpnext	eq	5.0.22
erpnext	eq	11.1.34
erpnext	eq	8.10.2
erpnext	eq	11.1.41
erpnext	eq	4.20.2
erpnext	eq	10.1.77
erpnext	eq	11.1.15
erpnext	eq	8.0.14
erpnext	eq	7.2.24
erpnext	eq	10.1.10