Medium severity6.4NVD Advisory· Published Feb 11, 2026· Updated Jun 17, 2026
CVE-2019-25311
CVE-2019-25311
Description
thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields. Attackers can submit crafted script payloads in operating_system, system_owner, system_username, system_password, system_description, and server_name parameters to execute arbitrary JavaScript in victim browsers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:kostasmitroglou:thesystem:1.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kostasmitroglou:thesystem:1.0.0:*:*:*:*:*:*:*
- (no CPE)range: 1.0
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/47440nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/thesystem-persistent-xssnvdThird Party Advisory
News mentions
0No linked articles in our index yet.