CVE-2019-3961

Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a users browser session.

• CWE-79

• http://www.securityfocus.com/bid/108892Third Party Advisory, VDB Entry
• https://www.tenable.com/security/tns-2019-04Third Party Advisory
• http://www.securityfocus.com/bid/108892Third Party Advisory, VDB Entry
• https://www.tenable.com/security/tns-2019-04Third Party Advisory

Published

Jun 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3955Dameware Remote Mini Control version 12.1.0.34 and prior con…
• CVE-2019-3956Dameware Remote Mini Control version 12.1.0.34 and prior con…
• CVE-2019-3957Dameware Remote Mini Control version 12.1.0.34 and prior con…7.4
• CVE-2019-3958Insufficient output sanitization in WallacePOS 1.4.3 allows …
• CVE-2019-3959Cross-site request forgery in WallacePOS 1.4.3 allows a remo…
• CVE-2019-3960Unrestricted upload of file with dangerous type in WallacePO…
• CVE-2019-3962Content Injection vulnerability in Tenable Nessus prior to 8…
• CVE-2019-3963In OpenEMR 5.0.1 and earlier, controller.php contains a refl…
• CVE-2019-3964In OpenEMR 5.0.1 and earlier, controller.php contains a refl…
• CVE-2019-3965In OpenEMR 5.0.1 and earlier, controller.php contains a refl…
• CVE-2019-3966In OpenEMR 5.0.1 and earlier, controller.php contains a refl…
• CVE-2019-3967In OpenEMR 5.0.1 and earlier, the patient file download inte…