← All advisories

Medium severity6.1NVD Advisory· Published Sep 16, 2019· Updated Jun 17, 2026

CVE-2019-15950

CVE-2019-15950

Description

The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Redmineup/CRM
cpe:2.3:a:redmineup:crm:*:*:*:*:*:redmine:*:*
Range: <4.2.4
Redmine/CRM Plugindescription
Redmine/Redminellm-fuzzy
Range: <4.2.4

Patches

Vulnerability mechanics

References

2

github.com/zerohax/RedmineUP-XSS/blob/master/vcard-upload-xssnvdExploitThird Party Advisory
www.redmineup.com/pages/plugins/crm/updatesnvdVendor Advisory

News mentions

0

No linked articles in our index yet.