PT-2019-12358 · Projectsend · Projectsend

Published 2019-04-26 · Updated 2019-05-01 · CVE-2019-11533

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ProjectSend versions prior to r1070

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML.

Recommendations For versions prior to r1070, update to version r1070 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-11533

Affected Products

Projectsend

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-11533 · Security Note
• https://projectsend.org/change-log · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-11533 · Vendor Advisory
• http://securityfocus.com/bid/108088 · Note