medium4.8
CVE-2019-19855
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
Impact
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_type parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Serpico Project | Serpico | Version 1.3.0 |