$ cve CVE-2019-8924 JSON

CVE-2019-8924 EXPLOIT

6.1

MEDIUM · CVSS 3.0 · EPSS 5.7% (pctl 93)

Patch early

A public exploit exists.

XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.

CVSS	6.1 (MEDIUM, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS	5.67% — more likely to be exploited than 93% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2019-05-17
Last modified	2026-06-17

Vendor	Product
apachefriends	xampp

Source	Title	Date
exploit-db	XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting	2019-02-19