CVE-2019-11359: Scilico I, Librarian

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter.

Affected products

• Scilico I, Librarian: version 4.10 only

Published 2019-04-20. Last modified 2026-06-17.