← All advisories

Medium severity6.1NVD Advisory· Published Sep 3, 2018· Updated Jun 17, 2026

CVE-2018-16407

CVE-2018-16407

Description

An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mayan-edmsPyPI	< 3.0.3	3.0.3

Affected products

1

ghsa-coords
pkg:pypi/mayan-edms
Range: < 3.0.3

Patches

Vulnerability mechanics

References

6

gitlab.com/mayan-edms/mayan-edms/commit/076468a9225e4630a463c0bbceb8e5b805fe380cnvdPatchThird Party AdvisoryWEB
gitlab.com/mayan-edms/mayan-edms/issues/496nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-5h6m-9mvx-m6c5ghsaADVISORY
gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rstnvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-16407ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/mayan-edms/PYSEC-2018-15.yamlghsaWEB

News mentions

0

No linked articles in our index yet.