CVE-2019-19373: An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to...

Security readout for executives and security teams

This flaw affects older Squiz Matrix CMS 5.5.x releases and can let a user turn unsafe PHP object handling into local file inclusion and remote code execution. For an organization running affected versions, the business risk is compromise of a web content platform, but the bundle does not show active exploitation. Exposure is limited to Squiz Matrix CMS 5.5.0, 5.5.1, 5.5.2, and 5.5.3 branches below the fixed point releases named in the CVE. Evidence about authentication requirements, default reachability, or configuration prevalence is incomplete in the bundle. Treat this as high priority if Squiz Matrix CMS 5.5.x is present. RCE against a CMS can affect website integrity and underlying systems. If Squiz Matrix is not used, no action is required beyond confirming the asset inventory. Mitigation focus: Upgrade affected Squiz Matrix CMS 5.5.x deployments to the fixed point release or newer.; Review the Squiz 5.5.3.3 release notes and vendor guidance for exact remediation steps.; Limit access to Remote Content authoring or administration workflows until remediation is complete..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.