What’s Vulnerable › Vulnerabilities
CVE-2019-12966
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-06-26 · updated 2026-06-17
- Weakness: CWE-74
Description
FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":(function(){confirm(1)})()} input.
Affected products
- Fehelper Project Fehelper: through 2019-06-19
References
Get alerted when CVE-2019-12966 or the next vulnerability affects your stack