Medium
CVSS 6.1
Overview
In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page.
CVE-2019-20221
In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php pa...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 6.1 (MEDIUM)
- Detected tags: none (tag impact: LOW)
Recommended actions:
- Prioritize remediation based on business criticality and exposure.
- Limit exposure and increase monitoring until fixed.