Alfresco Cross-Site Scripting Vulnerability (CNVD-2021-83570)

Alfresco is an open source enterprise content management system. The platform pages are developed using Freemarker and the main features include document management, collaboration, records management, knowledge base management, Web content management, etc. A security vulnerability exists in Alfresco, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code.