Lucene search
Veracode Vulnerability DatabaseVERACODE:7418HistorySep 04, 2018 - 5:37 a.m.
Cross-site Scripting (XSS)
2018-09-0405:37:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
EPSS
0.001
Percentile
36.5%
mayan-edms is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of sanitization of node.label in the jstree_data function of mayan/apps/cabinets/widgets.py, causing XSS attacks.
Related
osv
osv
CVE-2018-16406
2018-09-03 19:29:00
Moderate severity vulnerability that affects mayan-edms
2018-09-06 03:24:57
PYSEC-2018-14
2018-09-03 19:29:00
nvd
nvd
CVE-2018-16406
2018-09-03 19:29:00
prion
prion
Design/Logic Flaw
2018-09-03 19:29:00
cve
cve
CVE-2018-16406
2018-09-03 19:29:00
cvelist
cvelist
CVE-2018-16406
2018-09-03 19:00:00
github
github
Moderate severity vulnerability that affects mayan-edms
2018-09-06 03:24:57