CVE-2018-12944

Publication date

2018-07-31 14:00:00

Family

mitre

State

PUBLISHED

Description

Persistent Cross-Site Scripting (XSS) vulnerability in the "Categories" feature in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the name field.