CVE-2019-20222

6.1 mediumEPSS 0.7%

Medium (6.1) in sitracker support incident tracker. EPSS 0.7% chance of exploitation in the next 30 days.

In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS.

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19