Description
Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol. NOTE: this can be leveraged by remote attackers using CVE-2014-9041.
Remediation
References
Related Vulnerabilities
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2024-38477)
WordPress Plugin Occasions Cross-Site Request Forgery (1.0.4)
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3836)
WordPress Plugin White Label CMS Cross-Site Scripting (1.5.2)
Rukovoditel Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11821)