3 matches found
CVE-2019-19496
Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document...
5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References1
CVE-2019-19496
Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document...
5.2AI score0.00602EPSS
SaveExploits1References2
CVE-2019-19496
CVE-2019-19496 affects Alfresco Enterprise (pre-5.2.5). The vulnerability is a stored XSS via an uploaded HTML document in the web app. Root cause is insufficient validation of client-side data during upload, enabling script execution in the victim’s browser. Affected versions are Alfresco Enterp...
5.4CVSS5.1AI score0.00602EPSS
SaveExploits1References2Affected Software1
20