CVE-2019-11533 - Cross-site scripting (XSS) vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML

MEDIUM

Cross-site scripting (XSS) vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML

Published Apr 26, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.19%

Cross-site scripting (XSS) vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

http://www.securityfocus.com/bid/108088
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.projectsend.org/change-log/
x_refsource_CONFIRMRelease NotesVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/108088		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.projectsend.org/change-log/		x_refsource_CONFIRMRelease NotesVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Apr 26, 2019

Updated Aug 4, 2024

Reserved Apr 25, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a