XSS Vulnerability in AVG AntiVirus Network Notification Popup
CVE-2019-18654

6.1MEDIUM

Key Information:

Vendor

Avg

Status
Anti-virus
Vendor
CVE Published:
1 November 2019

What is CVE-2019-18654?

A Cross-Site Scripting (XSS) vulnerability exists in AVG AntiVirus's Network Notification Popup feature, allowing malicious users to execute arbitrary JavaScript code through specially crafted SSID names. This vulnerability could potentially lead to unauthorized actions on behalf of users or expose sensitive data, making it crucial for users to ensure their systems are up-to-date and secure from exploitation.

References

https://medium.com/%40YoKoKho/5-000-usd-xss-issue-at-avas...
x_refsource_MISC
http://firstsight.me/2019/10/5000-usd-xss-issue-at-avast-...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-18654 : XSS Vulnerability in AVG AntiVirus Network Notification Popup