cve/2019/CVE-2019-8938.md

CVE-2019-8938

Description

VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter.

POC

Reference

• http://packetstormsecurity.com/files/151800/VertrigoServ-2.17-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2019/Feb/47

Github

No PoCs found on GitHub currently.