CVE-2020-13888

Kordil EDMS before 2.2.60rc3 contains a stored XSS vulnerability in the web UI: users_edit.php, users_management_edit.php, and user_management.php. The root cause is insufficient validation of client-supplied data, allowing injected scripts to be stored and later reflected. Impact notes in the so...