CVE-2019-12930

Name: CVE-2019-12930
Creator: NVD / NIST
Published: 2019-07-08T20:15:10.693+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.14%

Last modified Jun 17, 2026

CVE-2019-12930 is a vulnerability of currently unknown severity. A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter.. EPSS estimates a 1.14% chance of exploitation in the next 30 days.

Description

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter.

Metrics

EPSS Probability

1.14%

62.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Wikindx Project	Wikindx	< 5.8.1

References

https://sourceforge.net/p/wikindx/code/2787Patch, Third Party Advisory
https://sourceforge.net/p/wikindx/code/2788Third Party Advisory
https://sourceforge.net/p/wikindx/news/2019/07/wikindx-581-released/Release Notes, Third Party Advisory
https://sourceforge.net/p/wikindx/code/2787Patch, Third Party Advisory
https://sourceforge.net/p/wikindx/code/2788Third Party Advisory
https://sourceforge.net/p/wikindx/news/2019/07/wikindx-581-released/Release Notes, Third Party Advisory

Timeline

Published: Jul 8, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-12930?

How severe is CVE-2019-12930?

Severity scoring for CVE-2019-12930 is pending analysis. The EPSS model estimates a 1.14% probability of exploitation in the next 30 days.

How do I fix CVE-2019-12930?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-12930?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST