---
id: 4203
title: "[CVE-2019-7551] Cantemo Portal Version 3.8.4 - Cross-Site Scripting"
cve: CVE-2019-7551
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/cantemo-portal-3-8-4-xss-advisory"
published_at: "2019-03-08T00:00:00Z"
tags: ["rce", "stored-xss", "vulnerability-advisory", "cantemo", "cve-2019-7551", "media-asset-management"]
phying_url: "https://phying.com/item/4203"
lang: en
---

# [CVE-2019-7551] Cantemo Portal Version 3.8.4 - Cross-Site Scripting

## Summary

Cantemo Portal 3.8.4 stored XSS (CVE-2019-7551) lets a low-privilege user run JavaScript against admins, potentially reaching server-side code execution; fixed in 4.0.0.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2019-7551
- **Published:** 2019-03-08T00:00:00Z
- **Original:** https://bishopfox.com/blog/cantemo-portal-3-8-4-xss-advisory
- **Phying News:** https://phying.com/item/4203