CVE-2019-7551

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app.

• CWE-79

• https://blog-posts--cantemo.netlify.com/news/2019/03/cantemo-portal-xss-vulnerabilities/Release Notes, Vendor Advisory
• https://doc.cantemo.com/latest/ReleaseNotes/intro.html#version-3-4-9Release Notes, Vendor Advisory
• https://www.bishopfox.com/blog/news-category/advisories/Third Party Advisory
• https://www.bishopfox.com/news/2019/03/cantemo-portal-version-3-8-4-cross-site-scripting/Exploit, Third Party Advisory
• https://blog-posts--cantemo.netlify.com/news/2019/03/cantemo-portal-xss-vulnerabilities/Release Notes, Vendor Advisory
• https://doc.cantemo.com/latest/ReleaseNotes/intro.html#version-3-4-9Release Notes, Vendor Advisory
• https://www.bishopfox.com/blog/news-category/advisories/Third Party Advisory
• https://www.bishopfox.com/news/2019/03/cantemo-portal-version-3-8-4-cross-site-scripting/Exploit, Third Party Advisory

Published

Apr 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7545In DbNinja 3.2.7, the Add Host function of the Manage Hosts …
• CVE-2019-7546An issue was discovered in SIDU 6.0. The dbs parameter of th…
• CVE-2019-7547An issue was discovered in SIDU 6.0. Because the database na…
• CVE-2019-7548SQLAlchemy 1.2.17 has SQL Injection when the group_by parame…7.8
• CVE-2019-7549An issue was discovered in GitLab Community and Enterprise E…
• CVE-2019-7550In JForum 2.1.8, an unauthenticated, remote attacker can enu…
• CVE-2019-7552An issue was discovered in PHP Scripts Mall Investment MLM S…5.4
• CVE-2019-7553PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.…5.4
• CVE-2019-7554An issue was discovered in PHP Scripts Mall API Based Travel…
• CVE-2019-7559In btor2parser/btor2parser.c in Boolector Btor2Tools before …
• CVE-2019-7560In parser/btorsmt2.c in Boolector 3.0.0, opening a specially…
• CVE-2019-7564An issue was discovered on Shenzhen Coship WM3300 WiFi Route…