Lucene search
China National Vulnerability DatabaseCNVD-2021-102878HistoryOct 28, 2021 - 12:00 a.m.
Nextcloud Contacts Cross-Site Scripting Vulnerability
2021-10-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
nextcloud
contacts
xss
vulnerability
validation
javascript
germany
web application
cross-site scripting
EPSS
0.001
Percentile
19.4%
Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. nextcloud Contacts application prior to version 4.0.3 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute JavaScript code on the client side.
Related
cve
cve
CVE-2021-39221
2021-10-25 19:15:09
osv
osv
CVE-2021-39221
2021-10-25 19:15:09
nextcloud
nextcloud
XSS in Contacts
2021-10-25 11:00:04
cvelist
cvelist
CVE-2021-39221 XSS in Contacts
2021-10-25 19:05:10
prion
prion
Cross site scripting
2021-10-25 19:15:00
nvd
nvd
CVE-2021-39221
2021-10-25 19:15:09