Cross site scripting

2023-12-0907:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

javascript injection

markdown editor

nvd

seafile 9.0.6

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor.

CPENameOperatorVersion
seafileeq9.0.6

CPE	Name	Operator	Version
	seafile	eq	9.0.6

References

herolab.usd.de/en/security-advisories/usd-2022-0032/

manual.seafile.com/changelog/server-changelog/