description: Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.
problem types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)
affected:
{
product: Nextcloud Server
vendor: Nextcloud
versions:
status: affected, version: before 11.0.3
}