CVE-2019-18205

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p50

Published

Oct 30, 2019 (Oct 30, 2019)

Modified

Jun 17, 2026

Description

Multiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1. The browsing component did not properly sanitize user input (encoded in base64). This also applies to the search functionality for the searchKey parameter.

Vendors: zucchetti
Products: infobusiness
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.