Medium severity6.1NVD Advisory· Published Oct 24, 2019· Updated Jun 17, 2026

CVE-2019-18419

Description

A cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB control panel 19.09 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Affected products

ClonOS/Clonos
cpe:2.3:o:clonos:clonos:19.09:*:*:*:*:*:*:*
CLONOS/CLONOS WEB control paneldescription
ClonOS/WEB control panelllm-create
Range: 19.09

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000