Lucene search
+L

CVE-2019-10010: Improper Neutralization of Input During Web Page Generation

🗓️ 24 Mar 2019 00:00:00Reported by Rapid7Type 
rapid7
 rapid7
🔗 www.rapid7.com👁 12 Views

Remote XSS in PHP League CommonMark before 0.18.3 via double-encoded HTML entities.

Related
Refs
ReporterTitlePublishedViews
Family
cnvd
CNVD
PHP League CommonMark library cross-site scripting vulnerability
25 Mar 201900:00
–cnvd
cve
CVE
CVE-2019-10010
24 Mar 201917:58
–cve
cvelist
Cvelist
CVE-2019-10010
24 Mar 201917:58
–cvelist
debiancve
Debian CVE
CVE-2019-10010
24 Mar 201917:58
–debiancve
euvd
EUVD
EUVD-2019-0649
7 Oct 202500:30
–euvd
friendsofphp
Friends Of PHP
XSS vulnerability with double-encoded entities
21 Mar 201922:52
–friendsofphp
github
Github Security Blog
Moderate severity vulnerability that affects league/commonmark
17 Sep 201922:47
–github
mend
Mend
CVE-2019-10010
24 Mar 201917:58
–mend
nvd
NVD
CVE-2019-10010
24 Mar 201918:29
–nvd
osv_cve
osv_cve
CVE-2019-10010
24 Mar 201918:29
–osv_cve
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Aug 2024 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 36.1
CVSS 24.3
EPSS0.0105
12