CVE-2020-8777: Alfresco

Medium severity, CVSS 5.4. EPSS: 3.2% chance of exploitation in the next 30 days.

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document.

Affected products

• Alfresco Alfresco: before 5.2.7 (fixed in 5.2.7); before 6.2.0 (fixed in 6.2.0)

Published 2020-03-02. Last modified 2026-06-17.