CVE-2019-16643

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit area.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 20, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-166449.8App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.CVE-2019-166458.6An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containingCVE-2019-166477.2Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.CVE-2019-1664910.0On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media serviceCVE-2019-16656.1A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conductCVE-2019-1665010.0On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket filCVE-2019-166515.3An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have insufficient protectioCVE-2019-166527.2The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands.CVE-2019-166538.8An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges.CVE-2019-166557.5joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.CVE-2019-166569.8joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the datCVE-2019-166576.1TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.
CVE-2019-16643: Medium severity, CVSS 5.4 | Vulnix