CVE-2025-45754

Description

A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name.

PUBLISHED Reserved 2025-04-22 | Published 2025-05-21 | Updated 2025-05-21 | Assigner mitre

References

www.simonjuguna.com/...xss-vulnerability-in-seeddms-v6-0-32/ exploit

www.simonjuguna.com/...xss-vulnerability-in-seeddms-v6-0-32/

cve.org (CVE-2025-45754)

nvd.nist.gov (CVE-2025-45754)

Download JSON