Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 11, 2026
thesystem Persistent XSS
CVE-2019-25311
Description
thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields. Attackers can submit crafted script payloads in operating_system, system_owner, system_username, system_password, system_description, and server_name parameters to execute arbitrary JavaScript in victim browsers.
Affected products
2=1.0+ 1 more
- (no CPE)range: =1.0
- (no CPE)range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.exploit-db.com/exploits/47440mitreexploit
- www.vulncheck.com/advisories/thesystem-persistent-xssmitrethird-party-advisory
News mentions
0No linked articles in our index yet.