CVE-2008-7231: Meridio Document And Records Management

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title).

Affected products

• Meridio Document And Records Management: up to and including 4.3; version 4.2 only

Published 2009-09-14. Last modified 2026-06-16.