← All advisories

Medium severity4.8NVD Advisory· Published Oct 10, 2019· Updated Jun 17, 2026

CVE-2019-17433

CVE-2019-17433

Description

z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Laravel Admin/Laravel Admin
cpe:2.3:a:laravel-admin:laravel-admin:1.7.3:*:*:*:*:*:*:*
z-song/laravel-admindescription
ghsa-coords
pkg:composer/encore/laravel-admin

Patches

Vulnerability mechanics

References

3

github.com/z-song/laravel-admin/issues/3847nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-fcmh-7492-g4q9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-17433ghsaADVISORY

News mentions

0

No linked articles in our index yet.