CVE-2019-12745: Improper Neutralization of Input During Web Page Generation

out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting XSS via the name field...

PT-2019-12915

Name of the Vulnerable Software and Affected Versions SeedDMS versions prior to 5.1.11 Description The issue allows for Stored Cross-Site Scripting XSS via the name field in the out/out.UsrMgr.php file. Recommendations For versions prior to 5.1.11, update to version 5.1.11 or later to resolve the...

CVE-2012-4569: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in out/out.UsrMgr.php in LetoDMS formerly MyDMS before 3.3.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...