Medium severity6.1NVD Advisory· Published Sep 12, 2019· Updated Jun 17, 2026
CVE-2019-16238
CVE-2019-16238
Description
Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login.
Affected products
3cpe:2.3:a:afterlogic:aurora:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:afterlogic:aurora:*:*:*:*:*:*:*:*range: <=8.3.9
- (no CPE)range: <=8.3.9-build-a3
- Afterlogic/Auroradescription
Patches
Vulnerability mechanics
References
1- www.sevenlayers.com/index.php/247-afterlogic-aurora-v8-3-9-build-a3-xss-session-hijacknvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.