CVE-2019-15230

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account.

• CWE-79

• https://www.sevenlayers.com/index.php/239-librenms-v1-54-xssExploit, Third Party Advisory
• https://www.sevenlayers.com/index.php/239-librenms-v1-54-xssExploit, Third Party Advisory

Published

Aug 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15225In Envoy through 1.11.1, users may configure a route to matc…
• CVE-2019-15226Upon receiving each incoming request header data, Envoy will…7.5
• CVE-2019-15227FlightPath 4.8.3 has XSS in the Content, Edit urgent message…
• CVE-2019-15228FUEL CMS 1.4.4 has XSS in the Create Blocks section of the A…
• CVE-2019-15229FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks …
• CVE-2019-1523Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15231Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15232Live555 before 2019.08.16 has a Use-After-Free because Gener…9.8
• CVE-2019-15233The Live:Text Box macro in the Old Street Live Input Macros …6.1
• CVE-2019-15234SHAREit through 4.0.6.177 does not check the full message le…7.5
• CVE-2019-15235CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 all…6.5
• CVE-2019-15237Roundcube Webmail through 1.3.9 mishandles Punycode xn-- dom…7.4