CVE-2019-6031

—

CVSS 3.1

6.1 medium

EPSS

<1%p54

Published

Dec 26, 2019 (Dec 26, 2019)

Modified

Jun 17, 2026

Description

Cross-site scripting vulnerability in KINZA for Windows version 5.9.2 and earlier and for Mac version 5.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via RSS reader.

Vendors: dayz
Products: kinza
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.