Description SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c. Remediation References CVE-2019-19242 Related Vulnerabilities WordPress Plugin Email Users Cross-Site Scripting (4.8.2) OpenSSL Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-2650) Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2005-4838) WordPress Plugin FG Joomla to WordPress Cross-Site Scripting (3.30.0) Internet Information Services Other Vulnerability (CVE-2001-0335) Severity Medium Classification CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Tags Missing Update Known Vulnerabilities CWE-476 CVE-2019-19242