Description ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.' Remediation References CVE-2020-16255 Related Vulnerabilities MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2311) WordPress Plugin Fancy Product Designer-WooCommerce Arbitrary File Upload (4.5.1) WordPress Plugin SEO by Squirrly SEO SQL Injection (12.3.19) Oracle HTTP Server Other Vulnerability (CVE-2002-0655) SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0931) Severity Medium Classification CVE-2020-16255 Tags Missing Update Known Vulnerabilities