CVE-2018-19924: Sales & Company Management System Project Sales & Company Management System

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address.

Affected products

• Sales & Company Management System Project Sales & Company Management System: up to and including 2018-12-05

Published 2018-12-06. Last modified 2026-06-17.