What is CVE-2019-25502?

CVE-2019-25502 is a medium-severity vulnerability in Niteosoft Simple Job Script, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-04.

How severe is CVE-2019-25502?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Niteosoft Simple Job Script

CVE-2019-25502

Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value parameter in the jobs endpoint. Attackers can craft requests with SVG payload injection to execute arbitrary JavaScript in victim browsers and steal session cookies or perform unauthorized actions.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (16.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Niteosoft Simple Job Script — versions 1.66
Simplejobscript

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

ExploitDB-46612 (Exploit, exploit, VDB Entry)
VulnCheck Advisory: Simple Job Script Cross-Site Scripting via job_type_value Parameter (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2019-25502?: CVE-2019-25502 is a medium-severity vulnerability in Niteosoft Simple Job Script, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-04.
How severe is CVE-2019-25502?: Medium severity. CVSS v3 base score is 6.1 out of 10.