CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

CVE-2020-28727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

PT-2020-17036

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.13 Description Cross-site scripting XSS exists via the folderid parameter to the "views/bootstrap/class.DropFolderChooser.php" file. This issue allows for potential XSS attacks. Recommendations For SeedDMS version 6.0.13,...