← CVE Intelligence

CVE-2019-20521

n/a / n/a PUBLISHED

Description (CNA)

ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/ URI.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.netsparker.com/web-applications-advisories/ns-19-017-cross-site-scripting-in-erpnext/

ADP enrichment

CVE

No English description supplied.

https://www.netsparker.com/web-applications-advisories/ns-19-017-cross-site-scripting-in-erpnext/