medium6.1
CVE-2019-12299
Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.
Impact
Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sandline | Centraleyezer | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2019/Nov/8
- https://medium.com/insidersec0x42/centraleyezer-stored-xss-using-html-entities-cve-2019-12299-5c295ae54ef
- http://seclists.org/fulldisclosure/2019/Nov/8
- https://medium.com/insidersec0x42/centraleyezer-stored-xss-using-html-entities-cve-2019-12299-5c295ae54ef