Medium severity6.1NVD Advisory· Published May 8, 2019· Updated Jun 17, 2026

CVE-2019-11398

Description

Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parameter to admin/index.php, the go parameter to /admin/index.php?register=register, or the error parameter to admin/index.php?action=favicon.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

UliCMS/UliCMS3 versions
cpe:2.3:a:ulicms:ulicms:2019.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ulicms:ulicms:2019.1:*:*:*:*:*:*:*
- cpe:2.3:a:ulicms:ulicms:2019.2:*:*:*:*:*:*:*
- (no CPE)range: 2019.1, 2019.2
UliCMS/UliCMSdescription

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/46741/nvdExploitThird Party AdvisoryVDB Entry
en.ulicms.denvdVendor Advisory
packetstormsecurity.com/files/153219/UliCMS-2019.1-Cross-Site-Scripting.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000