Medium severity6.1NVD Advisory· Published Jan 2, 2020· Updated Jun 17, 2026
CVE-2019-20221
CVE-2019-20221
Description
In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page.
Affected products
4- cpe:2.3:a:sitracker:support_incident_tracker:3.67:*:*:*:*:*:*:*
- Support Incident Tracker (SiT!)/Support Incident Tracker (SiT!)description
- Range: = 3.67
- Range: = 3.67
Patches
Vulnerability mechanics
References
1- fatihhcelik.blogspot.com/2019/12/support-incident-tracker-xss-in-plugin.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.