What’s Vulnerable › Vulnerabilities

CVE-2019-1020005

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-29 · updated 2026-06-17
• Weakness: CWE-79

Description

invenio-communities before 1.0.0a20 allows XSS.

Affected products

• invenio-communities: 1.0.0-a1, 1.0.0-a10, 1.0.0-a11, 1.0.0-a12, 1.0.0-a13, 1.0.0-a14 (+13)

References

• https://github.com/inveniosoftware/invenio-communities/security/advisories/GHSA-mfv8-q39f-mgfg
• https://github.com/inveniosoftware/invenio-communities/security/advisories/GHSA-mfv8-q39f-mgfg

Get alerted when CVE-2019-1020005 or the next vulnerability affects your stack