CVE-2020-8120: Nextcloud Server

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation.

Affected products

• Nextcloud Nextcloud Server: version 16.0.1 only

Published 2020-02-04. Last modified 2026-06-17.