CVE-2019-19908

MEDIUM · CVSS 6.1 EPSS 21.23%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-19908

Severity

MEDIUM

CVSS

6.1

EPSS

21.23%

Java

Original NVD Description

phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable.