Security Advisory

CVE-2018-12944

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-31 14:00:00
Last updated 2024-08-05 08:52:49
Assigner mitre
State PUBLISHED

Description

Persistent Cross-Site Scripting (XSS) vulnerability in the "Categories" feature in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the name field.