Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php.

Published Dec 7, 2020 · Updated Jul 9, 2026 · Assigned by mitre