CVE-2019-9919

—

CVSS 3.1

5.4 medium

EPSS

<1%p50

Published

Mar 29, 2019 (Mar 29, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS.

Vendors: harmistechnology
Products: je messenger
Ecosystems: Joomla
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.