Cross-Site Scripting (XSS) Vulnerability in XHQ (All Versions < 6.1) Web Interface

CVE-2019-19284 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.

Learn more about our Web App Pen Testing.