CVE-2019-19855: Serpico Project Serpico

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_type parameter.

Affected products

Published 2020-01-15. Last modified 2026-06-17.