CVE-2019-13931CWE-80

A vulnerability has been identified in XHQ (All versions < V6.0.0.2)

published December 12, 2019

CVSS
—
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not expected, causing the application to behave in unexpected ways for legitimate users. Successful exploitation requires for an attacker to be authenticated to the web interface. A successful attack could cause the application to have unexpected behavior. This could allow the attacker to modify contents of the web application. At the time of advisory publication no public exploitation of this security vulnerability was known.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2019-12-12T19:08Z
EPSS history
Timeline
  • 12 DEC 19:08Z
    A vulnerability has been identified in XHQ (All versions < V6.0.0.2)
    cvelistv5