medium5.4
CVE-2019-19991
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
Impact
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /vam/vam_anagraphic.php, /vam/vam_vamuser.php, /common/vamp_main.php, and /wiz/change_password.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seling | Visual Access Manager | from 4.15.0 through 4.29.0 |