description: A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
problem types: Cross-site Scripting (XSS) - Generic (CWE-79)
affected:
{
product: Desktop Client
vendor: n/a
versions:
status: affected, version: 2.6.5
}