Critical severity9.8NVD Advisory· Published Dec 2, 2019· Updated Jun 17, 2026
CVE-2019-19502
CVE-2019-19502
Description
Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- CKEditor/Image Uploader and Browser for CKEditordescription
- Range: <4.1.9
Patches
Vulnerability mechanics
References
5- github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/commit/c293d38c8b99444e775d94c1af50c9676c6544d2nvdPatch
- github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/pull/11/commits/5c7a6b0e10504f08e2f50655541b767e276ce749nvdPatch
- github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/compare/4.1.8...v4.1.9nvdThird Party Advisory
- github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/pull/11nvdThird Party Advisory
- visat.me/security/cve-2019-19502/nvd
News mentions
0No linked articles in our index yet.