PT-2021-10824

Name of the Vulnerable Software and Affected Versions SeedDMS Content Management System version 6.0.7 Description The issue is a persistent cross-site scripting XSS vulnerability. It is located in the AddEvent.php component and can be exploited via the name and comment parameters. Recommendations...

CVE-2020-23048: Improper Neutralization of Input During Web Page Generation

SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting XSS vulnerability in the component AddEvent.php via the name and comment parameters...