Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities

Description

References

• nvd.nist.gov/vuln/detail/CVE-2014-3840 · ADVISORY
• mayan-edms/mayan-edms · WEB
• mayan-edms/mayan-edms commit 398c480 · WEB
• mayan-edms/Mayan-EDMS · PACKAGE
• pypa/advisory-database · WEB
• research.openflare.org/advisories/OF-2014-09/mayan-edbs-storedxss.txt · WEB
• research.openflare.org/poc/maya-edms/maya-edms_multiple_xss.avi · WEB
• seclists.org/oss-sec/2014/q2/349 · WEB
• seclists.org/oss-sec/2014/q2/352 · WEB
• exploit-db.com/exploits/33493 · WEB
• securityfocus.com/bid/67552
• GitHub Advisory GHSA-wpvx-26f7-65q3 · ADVISORY

Mais vulnerabilidades de mayan-edms

• CVE-2025-14692MÉDIO 6.1A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulatio…
• CVE-2025-14691MÉDIO 6.1A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manip…
• CVE-2022-47419MÉDIO 5.4An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
• CVE-2018-16407MÉDIO 6.1An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.
• CVE-2018-16406MÉDIO 6.1An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label.