CVE-2019-18207

MEDIUM · CVSS 5.4 EPSS 0.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-10-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-18207

Severity

MEDIUM

CVSS

5.4

EPSS

0.52%

Original NVD Description

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page.