CVE-2019-19284CWE-79

A vulnerability has been identified in XHQ (All Versions < 6.1)

published December 14, 2020

CVSS
—
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-12-14T21:05Z
EPSS history
Timeline
  • 14 DEC 21:05Z
    A vulnerability has been identified in XHQ (All Versions < 6.1)
    cvelistv5