CVE-2019-5925

—

CVSS 3.0

5.4 medium

EPSS

<1%p55

Published

Mar 12, 2019 (Mar 12, 2019)

Modified

Jun 17, 2026

Description

Cross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and earlier and Dradis Professional Edition v3.1.1 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendors: dradisframework
Products: dradis
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.