Medium severity4.8NVD Advisory· Published Jan 28, 2020· Updated Jun 17, 2026
CVE-2019-20435
CVE-2019-20435
Description
An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- WSO2/API Managerdescription
Patches
Vulnerability mechanics
References
3- cybersecurityworks.com/zerodays/cve-2019-20435-wso2.htmlnvdExploitThird Party Advisory
- github.com/cybersecurityworks/Disclosed/issues/18nvdExploitIssue TrackingThird Party Advisory
- docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0633nvdVendor Advisory
News mentions
0No linked articles in our index yet.