CVE-2019-18914

CVE-2019-18914 concerns multiple HP printers and MFPs where a poorly filtered third‑party link can trigger Cross‑Site Scripting in a client browser when clicked. Affected products include various HP Color LaserJet and Enterprise/Managed flow MFPs (e.g., CM4540 MFP, M880z/ M552, M651/M652/M653, M5...