CVE-2019-19858: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. admin/adduser/UID allows stored XSS via the author parameter...