Medium severity4.8NVD Advisory· Published Jan 15, 2020· Updated Jun 17, 2026
CVE-2019-19856
CVE-2019-19856
Description
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allows stored XSS via the type parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:serpico_project:serpico:1.3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:serpico_project:serpico:1.3.0:*:*:*:*:*:*:*
- (no CPE)range: =1.3.0
- Serpico/SimplE RePort wrIting and CollaboratiOn tooldescription
Patches
Vulnerability mechanics
References
2- github.com/SerpicoProject/Serpico/commit/270f05ca6e51c87bb0867abb0511b61bf2aae182nvdPatchThird Party Advisory
- websec.nl/news.phpnvdThird Party Advisory
News mentions
0No linked articles in our index yet.