← All advisories

Medium severity5.4NVD Advisory· Published Dec 2, 2019· Updated Jun 17, 2026

CVE-2019-19496

CVE-2019-19496

Description

Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Alfresco/Alfresco
cpe:2.3:a:alfresco:alfresco:*:*:*:*:enterprise:*:*:*
Range: <5.2.5
Alfresco/Alfresco Enterprisedescription
Alfresco/Alfresco Enterprise Repollm-fuzzy
Range: <5.2.5

Patches

Vulnerability mechanics

References

2

vipinxsec.blogspot.com/2019/11/alfresco-stored-xss-vulnerability-blind.htmlnvdExploitThird Party Advisory
github.com/vipinxsec/Alfresco_XSS/blob/master/README.mdnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.