medium6.1
CVE-2020-23048
SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment …
Impact
SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seeddms | Seeddms | Versions 4.3.37, 5.0.13, 5.1.14, 5.1.16, 5.1.18, 6.0.7 |