CVE-2019-20221

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p50

Published

Jan 2, 2020 (Jan 2, 2020)

Modified

Jun 17, 2026

Description

In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page.

Vendors: sitracker
Products: support incident tracker
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.