CVE-2019-11744

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them as markup. It is possible to pass a literal closing tag to .innerHTML on these elements, and subsequent content after that will be parsed as if it were outside the tag. This can lead to XSS if a site does not filter user input as strictly for these elements as it does for other elements. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Sep 27, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-117458.8When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds wr CVE-2019-117468.8A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potent CVE-2019-117476.5The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site.CVE-2019-117486.5WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party c CVE-2019-117494.3A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal CVE-2019-11757.0An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory. An attacker who successfully exploi CVE-2019-117506.5A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox < 69 and CVE-2019-117518.8Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks o CVE-2019-117528.8It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a CVE-2019-117537.8The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivi CVE-2019-117544.3When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious websi CVE-2019-117557.5A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature