CVE-2019-14427: Webstudio Ultimate Loan Manager

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code.

Affected products

• Webstudio Ultimate Loan Manager: version 2.0 only

Published 2019-08-14. Last modified 2026-06-17.