CVE-2019-25156

MEDIUM 6.1CVE-2019-25156 · Published 07/11/2023 · updated 17/06/2026

In short

CVE-2019-25156 is a MEDIUM (CVSS 6.1) vulnerability affecting agency (dstar2018).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 50.2% of all vulnerabilities.
Fix: update to 2019-01-15 or later.

Package	Affected versions	Patched versions
agency dstar2018	`< 2019-01-15`	`2019-01-15`

Description

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is named 975b56953efabb434519d9feefcc53685fb8d0ab. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-244495.

References

dstar2018/agency-code-repo commit 975b569 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free