← All advisories

Medium severity6.1NVD Advisory· Published Dec 7, 2020· Updated Jul 9, 2026

CVE-2020-28727

CVE-2020-28727

Description

Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Seeddms/Seeddms2 versions
cpe:2.3:a:seeddms:seeddms:6.0.13:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:seeddms:seeddms:6.0.13:*:*:*:*:*:*:*
- (no CPE)range: =6.0.13
SeedDMS/SeedDMSdescription

Patches

Vulnerability mechanics

References

2

sourceforge.net/p/seeddms/code/ci/32b03b1e5880e2f38cecf4ac7743f8f62f33043f/nvdPatchThird Party Advisory
sourceforge.net/projects/seeddms/files/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.