Seeddms vulnerabilities

Products

• Seeddms 33

Newest

• seeddms A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. This vulnerability... CVE-2025-45754 5.4 MediumMay 21, 2025
• seeddms A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary... CVE-2025-45752 7.2 HighMay 21, 2025
• seeddms A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin... CVE-2025-25461 Public exploit 5.4 MediumFebruary 28, 2025
• seeddms A stored cross-site scripting (XSS) vulnerability in SeedDMS v6.0.28 allows attackers to execute... CVE-2024-46409 5.4 MediumOctober 4, 2024
• seeddms A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute... CVE-2021-39421 6.1 MediumJuly 24, 2023
• seeddms SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit... CVE-2021-39425 6.1 MediumJuly 20, 2023
• seeddms An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid... CVE-2021-33223 8.8 HighJune 7, 2023
• seeddms Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full... CVE-2022-44938 9.8 CriticalDecember 8, 2022
• seeddms The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18... CVE-2022-28051 5.4 MediumJune 6, 2022
• seeddms SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality... CVE-2022-28478 6.5 MediumJune 6, 2022
• seeddms SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin... CVE-2022-28479 4.8 MediumJune 6, 2022
• seeddms Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote... CVE-2021-45408 6.1 MediumFebruary 4, 2022
• seeddms SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS)... CVE-2020-23048 6.1 MediumOctober 22, 2021
• seeddms Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.UnlockDocument.php in SeedDMS v5.1... CVE-2021-36543 4.3 MediumAugust 3, 2021
• seeddms Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x... CVE-2021-36542 4.3 MediumAugust 3, 2021
• seeddms Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x<5.1.23... CVE-2021-35343 4.3 MediumAugust 3, 2021
• seeddms SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php. CVE-2021-26216 4.3 MediumMarch 18, 2021
• seeddms SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php. CVE-2021-26215 4.3 MediumMarch 18, 2021
• seeddms Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap... CVE-2020-28727 6.1 MediumDecember 7, 2020
• seeddms Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php. CVE-2020-28726 6.1 MediumNovember 24, 2020
• seeddms A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result... CVE-2019-12932 6.1 MediumJune 28, 2019
• seeddms out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name... CVE-2019-12745 Public exploit 5.4 MediumJune 20, 2019
• seeddms SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of... CVE-2019-12744 Public exploit EPSS 11.5% 7.5 HighJune 20, 2019
• seeddms out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript... CVE-2019-12801 Public exploit 6.1 MediumJune 17, 2019
• seeddms Persistent Cross-Site Scripting (XSS) vulnerability in the "Categories" feature in SeedDMS ... CVE-2018-12944 6.1 MediumJuly 31, 2018
• seeddms Cross-Site Scripting (XSS) vulnerability in every page that includes the "action" URL parameter... CVE-2018-12943 6.1 MediumJuly 31, 2018
• seeddms SQL injection vulnerability in the "Users management" functionality in SeedDMS (formerly LetoDMS... CVE-2018-12942 8.8 HighJuly 31, 2018
• seeddms This vulnerability allows remote attackers to execute arbitrary code in SeedDMS (formerly LetoDMS... CVE-2018-12941 8.8 HighJuly 31, 2018
• seeddms Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS (formerly LetoDMS... CVE-2018-12940 8.8 HighJuly 31, 2018
• seeddms A directory traversal flaw in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows an... CVE-2018-12939 6.5 MediumJuly 31, 2018
• seeddms Multiple directory traversal vulnerabilities in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4... CVE-2014-2279 6.4 MediumOctober 17, 2014
• seeddms Unrestricted file upload vulnerability in op/op.AddFile2.php in SeedDMS (formerly LetoDMS and... CVE-2014-2278 5.1 MediumOctober 17, 2014
• seeddms Cross-site scripting (XSS) vulnerability in the search feature in SeedDMS (formerly LetoDMS and... CVE-2014-2280 4.3 MediumMarch 20, 2014