CVE-2020-19156

5.4 mediumEPSS 0.9%

Medium (5.4) in ari-soft ari adminer. EPSS 0.9% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component when the 'save()' function is called.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ari-soft:ari_adminer

References

https://www.seebug.org/vuldb/ssvid-97852
https://www.seebug.org/vuldb/ssvid-97852

Check your stack JSON