CVE-2019-12745

out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting XSS via the name field...

SeedDMS < 5.1.11 - 'out.UsrMgr.php' Cross-Site Scripting

Exploit Title: Persistent Cross-Site Scripting or Stored XSS in out/out.UsrMgr.php in SeedDMS before 5.1.11 Google Dork: NA Date: 20-June-2019 Exploit Author: Nimit Jainhttps://secfolks.blogspot.com Vendor Homepage: https://www.seeddms.org Software Link:...

CVE-2019-12745

out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting XSS via the name field...

CVE-2019-12745

SeedDMS contains a Stored XSS vulnerability in out/out.UsrMgr.php exploited via the name field, affecting versions before 5.1.11. The issue is documented across multiple sources (CVE-2019-12745, Red Hat advisory, Exploit-DB records) and involves injecting script code in user-name handling during ...