CVE-2019-7551

2019-04-1016:31:36

mitre

www.cve.org

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

JSON

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app.