Alfresco · Alfresco Enterprise · CVE-2019-19496
**Name of the Vulnerable Software and Affected Versions**
Alfresco Enterprise versions prior to 5.2.5
**Description**
The issue allows for stored XSS via an uploaded HTML document. This means an attacker can upload a malicious HTML file to the system, which can then execute scripts on the user's browser, potentially leading to unauthorized actions or data theft.
**Recommendations**
For versions prior to 5.2.5, update to version 5.2.5 or later to resolve the issue. As a temporary workaround, consider restricting the upload of HTML documents to minimize the risk of exploitation.