Skip to content
Nextcloud Contacts vulnerabilities
-
nextcloud contacts, kiteworks security-advisories +1 more
Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title field
CVE-2025-66554
3.5 Low
-
nextcloud contacts, kiteworks security-advisories +1 more
Nextcloud Contacts photos only sanitized if mime type is all lower case
CVE-2023-33182
0.0 None
-
nextcloud contacts, kiteworks security-advisories +1 more
XSS in Contacts
CVE-2021-39221
6.4 Medium
-
nextcloud contacts
A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files...
CVE-2020-8280
5.4 Medium
-
nextcloud contacts
A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious...
CVE-2020-8281
5.4 Medium
-
nextcloud contacts
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file...
CVE-2020-8181
4.3 Medium
-
nextcloud contacts, contacts application +1 more
In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete...
CVE-2018-3764
4.8 Medium