EUVD-2018-0091

Malware in sbrugna...

GHSA-FPCV-J2Q9-VQHW mayan-edms Cross-site Scripting vulnerability

An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS...

PYSEC-2018-106

An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS...

Cross site scripting

An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS...

PYSEC-2018-16

An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS...

CVE-2018-16405

The CVE-2018-16405 issue affects Mayan EDMS prior to 3.0.2, where the Appearance app directly uses window.location, causing cross-site scripting (XSS). The vulnerability enables attacker-controlled navigation or script execution related to insufficient input sanitization in the Appearance compone...

CVE-2018-16405

An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS...

PT-2018-13548

Name of the Vulnerable Software and Affected Versions Mayan EDMS versions prior to 3.0.2 Description An issue was discovered where the Appearance app sets window.location directly, leading to a potential XSS issue. Recommendations For versions prior to 3.0.2, update to version 3.0.2 or later to...

CVE-2018-16405: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS...