CVE-2019-8434 - In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter

MEDIUM

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter

Published Feb 18, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 0.75%

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17824		Advisory
https://github.com/fakerrr/CmsEasy_7.0/issues/2		x_refsource_MISCExploitIssue TrackingMitigationThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 18, 2019

Updated Sep 16, 2024

Reserved Feb 17, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Feb 18, 2019

Updated Sep 16, 2024

Exploited since n/a