CVE-2019-0186

PoC ×2—

CVSS 3.0

6.1 medium

EPSS

21%p97

Published

Apr 26, 2019 (Apr 26, 2019)

Modified

Jun 17, 2026

Description

The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file

Vendors: apache
Products: pluto
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (20.6%)

In the news0 stories

No ingested article mentions this CVE yet.