Aggregates CVE and security vulnerability intelligence across all syguestbook_a5_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Common weakness patterns include vendor risk cross-site scripting and vendor risk csrf, with potential vendor impact session compromise across vendor surface production workloads use cases.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2019-13950 | index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment. | [email protected] | 5.4 | 0.70% | 2019-07-18 | 2026-06-16 |
| CVE-2019-13949 | SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change. | [email protected] | 8.8 | 0.67% | 2019-07-18 | 2026-06-16 |
| CVE-2019-13948 | SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element. | [email protected] | 5.4 | 0.70% | 2019-07-18 | 2026-06-16 |