CVE-2018-1000065

...

CVE-2017-1000065

Multiple Cross-site scripting XSS vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights ManagementUsers functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser...

CVE-2017-1000065

CVE-2017-1000065 involves multiple cross-site scripting (XSS) vulnerabilities in the OpenMediaVault 2.1 rpc.php component (Access Rights Management/Users). The affected element is not explicitly enumerated beyond rpc.php in OpenMediaVault 2.1; the root cause is described as XSS allowing an attack...