Description

Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter.

Remediation

References

CVE-2013-0307

Related Vulnerabilities

WordPress Plugin WP to Twitter Cross-Site Scripting (3.0.5)

Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557)

WordPress Plugin WP Logs Book Cross-Site Scripting (1.0.1)

OpenSSL Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1473)

PrestaShop Improper Privilege Management Vulnerability (CVE-2023-43663)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-0307