medium4.8
CVE-2019-19856
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
Impact
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allows stored XSS via the type parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Serpico Project | Serpico | Version 1.3.0 |