Unscored CVE-2015-5625 EUVD-2015-5577GHSA-wmq8-fq8q-m5h4

Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the …

Published Sep 7, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter.

References

JVN#00015036 third-party-advisory
http://www.opendocman.com/opendocman-v1-3-4-released/
1033482 vdb-entry
JVNDB-2015-000128 third-party-advisory