Medium severity6.1NVD Advisory· Published Aug 14, 2019· Updated Jun 17, 2026
CVE-2019-14427
CVE-2019-14427
Description
XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:webstudio:ultimate_loan_manager:2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:webstudio:ultimate_loan_manager:2.0:*:*:*:*:*:*:*
- (no CPE)range: = 2.0
- WEB STUDIO/Ultimate Loan Managerdescription
Patches
Vulnerability mechanics
References
1- www.exploit-db.com/exploits/47198nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.