372 matches found
SeedDMS 6.0.29 Cross Site Scripting
SeedDMS version 6.0.29 suffers from a cross site scripting vulnerability. 📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDMS 6.0.29 📝 Description A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can injec...
Exploit for Cross-site Scripting in Seeddms
📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDM...
SeedDMS cross-site scripting vulnerability (CNVD-2024-41051)
SeedDMS is SeedDMS open source PHP and MySql based on a set of open source document management system . The system is mainly used to store and share documents . SeedDMS v6.0.28 version of the existence of cross-site scripting vulnerability , the vulnerability stems from the application of the...
CVE-2024-46409
A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...
CVE-2024-46409
A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...
CVE-2024-46409
A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...
CVE-2024-46409
A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...
CVE-2024-46409: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...
CVE-2024-46409
A stored cross-site scripting (XSS) vulnerability exists in SeedDMS v6.0.28 . The root cause is the application's failure to effectively filter and escape user-supplied data, specifically within the Name parameter on the Calendar page . An attacker can exploit this by injecting a crafted payload ...
CVE-2024-46409
A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...
PT-2024-31982
Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.28 Description A stored cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page. Recommendations For...
SeedDMS cross-site scripting vulnerabilities
SeedDMS is SeedDMS open source PHP and MySql based on a set of open source document management system . The system is mainly used to store and share documents . SeedDMS v6.0.28 version of the existence of cross-site scripting vulnerability , the vulnerability stems from the application of the...
SeedDMS 6.0.28 Cross Site Scripting
CVE-ID:CVE-2024-46409 --------------------------------------------------------------------- Suggested descriptionA stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in...
SeedDMS Information Disclosure Vulnerability
SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used to store and share documents. A security vulnerability exists in SeedDMS version v6.0.15, which stems from an open redirection vulnerability that can b...
CVE-2021-39421
A cross-site scripting XSS vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2021-39421
A cross-site scripting XSS vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2021-39421
A cross-site scripting XSS vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Cross site scripting
A cross-site scripting XSS vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
SeedDMS cross-site scripting vulnerabilities
SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS version 6.0.15, which stems from the presence of a cross-site scripting X...