Medium severity5.4OSV Advisory· Published Nov 7, 2018· Updated Jun 17, 2026
CVE-2018-19089
CVE-2018-19089
Description
tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- github.com/xujeff/tianti/issues/27nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.