CVE-2019-20221 - In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS

Back Back to CVE browser

MEDIUM

In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS

Published Jan 2, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.67%

Description

In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10775
Advisory
https://fatihhcelik.blogspot.com/2019/12/support-incident-tracker-xss-in-plugin.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10775		Advisory
https://fatihhcelik.blogspot.com/2019/12/support-incident-tracker-xss-in-plugin.html		x_refsource_MISCExploitThird Party Advisory