medium4.8
CVE-2019-19858
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
Impact
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the author parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Serpico Project | Serpico | Version 1.3.0 |