CVE-2019-19491: Testlink

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request.

Affected products

• Testlink Testlink: version 1.9.19 only

Published 2019-12-02. Last modified 2026-06-17.