CVE-2019-19678

5.4 mediumEPSS 0.6%

Medium (5.4) in xpand-it xray test mangaement. EPSS 0.6% chance of exploitation in the next 30 days.

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xpand-it:xray_test_mangaement

References

https://jira.xpand-it.com/browse/XRAY-4692
https://jira.xpand-it.com/browse/XRAY-4692

Check your stack JSON