VULNERABILITY INTELLIGENCE

CVE-2020-28727

CVSS score6.1 MEDIUM

EPSS probability0.70%

CISA KEVNot currently listed

Published2020-12-07

Last modified2026-07-09

Description

Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php.