CVE-2019-19466

SCEditor 2.1.3 allows XSS.

• CWE-79

• https://edricteo.com/sceditor-xss-vulnerability-in-version-2.1.3/Exploit, Third Party Advisory
• https://www.sceditor.com/tags/releases/Release Notes, Vendor Advisory
• https://edricteo.com/sceditor-xss-vulnerability-in-version-2.1.3/Exploit, Third Party Advisory
• https://www.sceditor.com/tags/releases/Release Notes, Vendor Advisory

Published

Dec 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1946A vulnerability in the web-based management interface of Cis…6.5
• CVE-2019-19460An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. Th…5.5
• CVE-2019-19461Post-authentication Stored XSS in Team Password Manager thro…5.4
• CVE-2019-19462relay_open in kernel/relay.c in the Linux kernel through 5.4…5.5
• CVE-2019-19463The Anhui Huami Mi Fit application before 4.0.11 for Android…5.3
• CVE-2019-19464The CBC Gem application before 9.24.1 for Android and before…5.3
• CVE-2019-19468Free Photo Viewer 1.3 allows remote attackers to execute arb…7.8
• CVE-2019-19469In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=…8.8
• CVE-2019-1947A vulnerability in the email message filtering feature of Ci…8.6
• CVE-2019-19470Unsafe usage of .NET deserialization in Named Pipe message p…7.8
• CVE-2019-19475An issue was discovered in ManageEngine Applications Manager…8.8
• CVE-2019-19479An issue was discovered in OpenSC through 0.19.0 and 0.20.x …5.5