CVE-2021-22878

Published March 3rd, 2021

View on NVD ↗

CVSS v3

4.8

MEDIUM

CVSS v2

3.5

LOW

Affected

1

PROJECT

Description

Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `OC.Notification.show`.

nextcloud/server

☁️ Nextcloud server, a safe home for all your data

GitHub

35.9K