CVE-2019-12801

out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name...

CVE-2019-12801

out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name...

PT-2019-12951

Name of the Vulnerable Software and Affected Versions SeedDMS version 5.1.11 Description The issue allows for Stored XSS by creating a new group with a JavaScript payload as the GROUP Name in the out/out.GroupMgr.php file. Recommendations For SeedDMS version 5.1.11, consider restricting the abili...

CVE-2019-12801: Improper Neutralization of Input During Web Page Generation

out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name...