CVE-2018-16407

An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-09-03

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Mayan Edms (Mayan-edms)

References

• https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst
• https://gitlab.com/mayan-edms/mayan-edms/commit/076468a9225e4630a463c0bbceb8e5b805fe380c
• https://gitlab.com/mayan-edms/mayan-edms/issues/496