Description

Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name.

Remediation

References

CVE-2016-7419

Related Vulnerabilities

WordPress Plugin WP Quick FrontEnd Editor Multiple Vulnerabilities (5.5)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Security Bypass (4.2.12)

Nginx Out-of-bounds Read Vulnerability (CVE-2023-27728)

WordPress Plugin Beautiful Stat Counter for WordPress-Everest Counter Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.7)

WordPress Plugin Arlo training and event management system Cross-Site Scripting (2.1.7.1)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-7419