Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38332
HistoryDec 05, 2022 - 5:26 a.m.

Cross-site Scripting (XSS)

2022-12-0505:26:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
cross-site scripting
xss
nextcloud-desktop
desktop client
application
notifications
software

EPSS

0.001

Percentile

26.4%

nextcloud-desktop is vulnerable to cross-site scripting. An attacker can inject and execute malicious HyperText Markup Language into the Desktop Client application through the notifications