CVE-2019-1956

CVE-2019-1956 is a medium-severity cross-site scripting (XSS) vulnerability affecting the web-based interface of the Cisco SPA112 2-Port Phone Adapter. An authenticated, remote attacker can exploit insufficient input validation by injecting malicious code into configuration fields, leading to arbitrary script execution in the user's browser or access to sensitive browser-based information. The CVSS score is 4.8, indicating a network attack vector with low attack complexity, requiring high privileges and user interaction, with low impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.