CVE-2025-45091

n/a / n/a PUBLISHED

Description (CNA)

Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting (XSS) attack. An authenticated attacker can exploit this vulnerability by modifying their username to include a malicious XSS payload in notification and activities.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://plus.seafile.com/wiki/publish/seafile-wiki/txzO/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.