An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-09-03T19:00:00

Updated: 2024-08-05T10:24:32.216Z

Reserved: 2018-09-03T00:00:00

Link: CVE-2018-16405

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2018-09-03T19:29:00.743

Modified: 2018-10-30T19:47:41.010

Link: CVE-2018-16405

cve-icon Redhat

No data.