Lucene search
China National Vulnerability DatabaseCNVD-2022-05448HistoryOct 25, 2021 - 12:00 a.m.
SeedDMS Cross-Site Scripting Vulnerability (CNVD-2022-05448)
2021-10-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.001 Low
EPSS
Percentile
35.1%
SeedDMS is a free document management system with an easy-to-use web-based user interface.A cross-site scripting vulnerability exists in the AddEvent.php component of SeedDMS version 6.0.7. An attacker could exploit the vulnerability to inject malicious scripting code via the name and comment parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| seeddms seeddms | eq | 4.3.37 | |
| seeddms seeddms | eq | 5.0.13 | |
| seeddms seeddms | eq | 5.1.14 | |
| seeddms seeddms | eq | 5.1.16 | |
| seeddms seeddms | eq | 5.1.18 | |
| seeddms seeddms | eq | 6.0.7 |
Related
nvd
nvd
CVE-2020-23048
2021-10-22 20:15:10
cve
cve
CVE-2020-23048
2021-10-22 20:15:10
cvelist
cvelist
CVE-2020-23048
2021-10-22 19:20:31
prion
prion
Cross site scripting
2021-10-22 20:15:00