CVE-2019-10073

The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks

published September 11, 2019

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05227 · 92.5th percentile
Published
2019-09-11T20:34Z
EPSS history
Timeline
  • 11 SEP 20:34Z
    The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks
    cvelistv5