CVE-2017-0891

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

Date published : 2017-05-08

https://nextcloud.com/security/advisory/?id=nc-sa-2017-008

https://hackerone.com/reports/216812