TI-2019-13266 CVE-2019-18249 · GHSA-64wv-499m-5qm6Cross-site scripting in Reliable Controls MACH-ProWebCom/SysPriority LOW 29Reliable Controls MACH-ProWebCom/Sys, all versions prior to 2.15 (Firmware versions prior to 8.26.4), may allow attacker to execute commands on behalf of the user when an authenticated user clicks on a malicious link.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00838 · Published 2019-12-24 · No fix listed CWE-79