CVE-2019-19856

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The User Type on the admin/listuser page allows stored XSS via the type parameter...

CVE-2019-19856

CVE-2019-19856 affects Serpico (SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The vulnerability is a stored cross-site scripting (XSS) flaw in the admin/list_user page, exploitable via the type parameter. The issue is supported by multiple connected sources describing Serpico’s admin/User ...