cve/2018/CVE-2018-19919.md

### [CVE-2018-19919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19919)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element.

### POC

#### Reference
- https://github.com/pixelimity/pixelimity/issues/19
- https://github.com/pixelimity/pixelimity/issues/19

#### Github
- https://github.com/0xT11/CVE-POC