Description

Cross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to apps/bookmark/index.php.

Remediation

References

CVE-2012-5666

Related Vulnerabilities

WordPress Improper Input Validation Vulnerability (CVE-2011-4957)

MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-0364)

silverstripeCMS Incorrect Authorization Vulnerability (CVE-2021-28661)

Resin Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-44138)

WordPress Plugin Mail Control-Email Customizer, SMTP Deliverability, logging, open and click Tracking Cross-Site Scripting (0.3.1)

Severity

Medium

Classification

CVE-2012-5666 CWE-707

Tags

Missing Update Known Vulnerabilities