← All advisories

Medium severity6.1NVD Advisory· Published Sep 9, 2021· Updated Jun 17, 2026

CVE-2020-19515

CVE-2020-19515

Description

qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Qdpm/Qdpm2 versions
cpe:2.3:a:qdpm:qdpm:9.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:qdpm:qdpm:9.1:*:*:*:*:*:*:*
- (no CPE)range: 9.1
qdPM/qdPMdescription

Patches

Vulnerability mechanics

References

1

topsecalphalab.github.io/CVE/qdPM9.1-Installer-Cross-Site-ScriptingnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.