Medium severity5.4NVD Advisory· Published Aug 13, 2018· Updated Jun 17, 2026
CVE-2018-3780
CVE-2018-3780
Description
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<13.0.5+ 1 more
- (no CPE)range: <13.0.5
- (no CPE)range: >13.0.5
Patches
Vulnerability mechanics
References
2- hackerone.com/reports/383117nvdThird Party Advisory
- nextcloud.com/security/advisory/nvdVendor Advisory
News mentions
0No linked articles in our index yet.