CVE-2020-28727

SeedDMS 6.0.13 is affected by a cross-site scripting (XSS) vulnerability exploitable via the folderid parameter to views/bootstrap/class.DropFolderChooser.php. The issue arises from improper handling of user-controlled input in that parameter, enabling injected script when the affected page is lo...