CVE-2019-20221

In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS

published January 2, 2020

CVSS
—
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00668 · 51.3th percentile
Published
2020-01-02T04:30Z
EPSS history
Timeline
  • 02 JAN 04:30Z
    In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS
    cvelistv5