Unscored CVE-2019-5926 EUVD-2019-15494GHSA-37pr-75w2-42x6

Cross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated attackers to inject arbitrary web script …

Published Mar 27, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Project Kinaga Product: KinagaCMS

Description

Cross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Project Kinaga	KinagaCMS	versions prior to 6.5	—

References

https://xn--5rwx17a.xn--v8jtdudb.com/
https://github.com/KinagaCMS/KinagaCMS
https://jvn.jp/en/jp/JVN06527859/index.html