CVE-2019-19288

Siemens XHQ is affected by CVE-2019-19288 for all versions prior to 6.1, with a Cross-Site Scripting (XSS) vulnerability in the web interface. Root cause: improper neutralization of input/output leading to XSS when users visit malicious links. Impact: client-side compromise via XSS; CVSS v3.1 bas...