description: Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.
problem types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)
affected:
{
product: Nextcloud Server
vendor: Nextcloud
versions:
status: affected, version: before 9.0.58 and 10.0.5 and 11.0.3
}