CVE-2025-45754

A stored cross-site scripting XSS vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name...

CVE-2025-45752

A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager...

SeedDMS 安全漏洞

SeedDMS is SeedDMS open source an open source document management system based on PHP and MySql. The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS version 6.0.32, which originates from stored cross-site scripting and could lead to the injectio...

CVE-2025-45754

A stored cross-site scripting XSS vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name...

CVE-2025-45752

A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager...

PT-2025-22403

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.32 Description A stored cross-site scripting XSS issue exists, allowing an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name. Recommendations For SeedDMS versio...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

SeedDMS 安全漏洞

SeedDMS is SeedDMS open source an open source document management system based on PHP and MySql. The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS version 6.0.29. Attackers can exploit the vulnerability to remotely execute code...

PT-2025-9108 · Seeddms · Seeddms

Name of the Vulnerable Software and Affected Versions: SeedDMS version 6.0.29 Description: A Stored Cross-Site Scripting XSS vulnerability exists. A user or rogue administrator with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is...

CVE-2025-25461

CVE-2025-25461 affects SeedDMS 6.0.29. A stored XSS flaw exists in the category-name field: a user with Add Category permission can inject payloads that are stored server-side and rendered unencoded when a document is viewed, allowing execution in other users’ browsers. The root cause is lack of ...

CVE-2025-25461

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

SeedDMS 6.0.29 Cross Site Scripting

SeedDMS version 6.0.29 suffers from a cross site scripting vulnerability. 📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDMS 6.0.29 📝 Description A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can injec...

Exploit for Cross-site Scripting in Seeddms

📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDM...

SeedDMS cross-site scripting vulnerability (CNVD-2024-41051)

SeedDMS is SeedDMS open source PHP and MySql based on a set of open source document management system . The system is mainly used to store and share documents . SeedDMS v6.0.28 version of the existence of cross-site scripting vulnerability , the vulnerability stems from the application of the...

CVE-2024-46409

A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...

CVE-2024-46409

A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...

CVE-2024-46409

CVE-2024-46409 concerns SeedDMS v6.0.28 with a stored XSS vulnerability. The issue arises from insufficient filtering/escaping of user-supplied data in the Name parameter on the Calendar page, allowing an attacker to inject and execute arbitrary web scripts or HTML when the page is viewed. Multip...