CVE-2019-13977: index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=...

Security readout for executives and security teams

CVE-2019-13977 is a cross-site scripting issue reported in Ovidentia 8.4.3. If an attacker can get a user to open a crafted page or link in a vulnerable area, browser-executed script could run in that user's session. The public sources do not provide CVSS scoring or confirm active exploitation. Exposure is most likely where Ovidentia 8.4.3 is still deployed and index.php routes for groups, mail domains, delegation, site, directory, notes, FAQs, or occupational content are reachable. Internet exposure increases business risk, but authentication and role requirements are not stated in the provided sources. Give this medium priority if Ovidentia 8.4.3 is present, especially on internet-facing systems or systems used by administrators. Business urgency depends on exposure and user privilege because the sources do not confirm active exploitation or provide severity scoring. Mitigation focus: Inventory Ovidentia deployments and confirm whether version 8.4.3 is present.; Check Ovidentia vendor or maintainer guidance for fixed versions or advisories.; Restrict external access to vulnerable administrative or content-management routes where possible..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.