high7.5
CVE-2019-19998
Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.
Impact
Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xiuno | Xiunobbs | Version 4.0 |