Threats tagged 'ghsa-34j9-6jj5-p9gw'

A cross-site scripting (XSS) vulnerability exists in the API Key creation UI component of LogicalDOC Community Edition up to version 9.2.1. This vulnerability allows remote attackers to inject malicious scripts. The vulnerability has been publicly disclosed, and exploit code is available. The vendor has not responded to the disclosure, and no patch or remediation is currently available.