CVE-2019-10073

—

CVSS 3.1

6.1 medium

EPSS

5%p92

Published

Sep 11, 2019 (Sep 11, 2019)

Modified

Jun 17, 2026

Description

The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616

Vendors: apache
Products: ofbiz
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (5.2%)

In the news0 stories

No ingested article mentions this CVE yet.