system
Describe <CVE-2019-15618>.
user
What is <CVE-2019-15618>?
assistant
Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location..