medium5.4
CVE-2019-19990
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
Impact
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /monitor/s_headmodel.php and /vam/vam_user.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seling | Visual Access Manager | from 4.15.0 through 4.29.0 |