CVE-2019-11564

A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a…

published May 8, 2019

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02627 · 85.4th percentile
Published
2019-05-08T15:45Z
EPSS history
Timeline
  • 08 MAY 15:45Z
    A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a…
    cvelistv5