CVE-2019-9758: Labkey Server

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators from security/permissions.view, security/addUsers.view, or wiki/Administration/page.view in the admin panel, leading to privilege escalation.

Affected products

• Labkey Labkey Server: version 19.1.0 only

Published 2019-10-29. Last modified 2026-06-17.