VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Oct 22, 2021· Updated Jun 17, 2026

CVE-2020-23048

CVE-2020-23048

Description

SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Seeddms/Seeddms6 versions
    cpe:2.3:a:seeddms:seeddms:4.3.37:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:seeddms:seeddms:4.3.37:*:*:*:*:*:*:*
    • cpe:2.3:a:seeddms:seeddms:5.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:seeddms:seeddms:5.1.14:*:*:*:*:*:*:*
    • cpe:2.3:a:seeddms:seeddms:5.1.16:*:*:*:*:*:*:*
    • cpe:2.3:a:seeddms:seeddms:5.1.18:*:*:*:*:*:*:*
    • cpe:2.3:a:seeddms:seeddms:6.0.7:-:*:*:*:*:*:*
  • SeedDMS/Content Management Systemdescription
  • Seeddms/Content Management Systemllm-create
    Range: =6.0.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.