CVE-2019-1792

CVE-2019-1792 is a cross-site scripting (XSS) vulnerability in the URL block page of Cisco Umbrella, a cloud security service. An unauthenticated, remote attacker could exploit this by tricking a user into clicking a malicious link, leading to arbitrary script execution or access to sensitive browser information. The vulnerability has a CVSS score of 6.1 (Medium) due to its network attack vector, low attack complexity, and requirement for user interaction. While the EPSS score is low, indicating a low probability of exploitation, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.