CVE-2014-2057

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2014-03-23

http://owncloud.org/about/security/advisories/oC-SA-2014-007/