CVE-2019-14427: XSS

Published Aug 14, 2019

Updated

XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code.

Affected Software

1 affected component

Webstudio Ultimate Loan Manager=2.0

Event History

Aug 14, 2019

CVE Published

via MITRE·09:04 PM

Data Sourced

via MITRE·09:04 PM

Description

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates network access is sufficient and no privileges are required. Exploitation also requires user interaction.

Which systems can be identified as affected from the available information?

The affected product and version identified in the data are Webstudio Ultimate Loan Manager 2.0. The issue is associated with the Branches functionality and its notes parameter.

What is the expected security impact?

The CVSS vector indicates low confidentiality and integrity impact, no availability impact, and a changed scope. The recorded severity is medium, with a CVSS 3.0 score of 6.1.

CVE-2019-14427: XSS

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which systems can be identified as affected from the available information?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which systems can be identified as affected from the available information?

What is the expected security impact?