4 matches found
CVE-2019-20520
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...
7.4CVSS6.3AI score0.00786EPSS
SaveExploits1References1
Cross site scripting
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...
4.3CVSS5.9AI score0.00786EPSS
SaveExploits1References1Affected Software1
CVE-2019-20520
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...
7.4CVSS6.1AI score0.00786EPSS
SaveExploits1References1
CVE-2019-20520
CVE-2019-20520 affects ERPNext 11.1.47 and is a reflected XSS vulnerability that can be triggered via the PATH_INFO to the api/method/ URI. Multiple connected feeds corroborate the same description. CVSS metrics: CVSSv3.1 base score 6.1 (NETWORK, LOW attack complexity, NONE privileges, UI REQUIRE...
7.4CVSS5.9AI score0.00786EPSS
SaveExploits1References1Affected Software1
20