CVE-2019-9094

NONE EPSS 52.7%
Published Mar 21, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 21, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS.

Threat Intelligence

EPSS Exploit Probability
52.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
humhubhumhub1.3.10any

References 1

  • github.com https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md
    Release NotesThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.