CVE-2019-9919

MEDIUM 5.4CVE-2019-9919 · Published 29/03/2019 · updated 17/06/2026

In short

CVE-2019-9919 is a MEDIUM (CVSS 5.4) vulnerability affecting je messenger (harmistechnology).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
je messenger harmistechnology	`= 1.2.2`	No fix yet

Description

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS.

References

extensions.joomla.org/extension/je-messenger · Product
azd-cert/CVE · Third Party Advisory

More vulnerabilities in je messenger

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

je messenger

harmistechnology

= 1.2.2

No fix yet

More vulnerabilities in je messenger

See all →