Medium severity4.8NVD Advisory· Published Jan 28, 2020· Updated Jun 17, 2026
CVE-2019-20438
CVE-2019-20438
Description
An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting (XSS) vulnerability has been identified in the inline API documentation editor page of the API Publisher.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- WSO2/API Managerdescription
Patches
Vulnerability mechanics
References
3- cybersecurityworks.com/zerodays/cve-2019-20438-wso2.htmlnvdExploitThird Party Advisory
- docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0645nvdVendor Advisory
- github.com/cybersecurityworks/Disclosed/issues/22nvdThird Party Advisory
News mentions
0No linked articles in our index yet.