CVE-2016-1498

CVE-2016-1498 is an XSS vulnerability in the ownCloud Server OCS discovery provider. It affects the OCS discovery provider component prior to: 7.0.12, 8.0.x prior to 8.0.10, 8.1.x prior to 8.1.5, and 8.2.x prior to 8.2.2, allowing remote attackers to inject arbitrary script via URL vectors. Multi...

CVE-2016-1498: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL...