CVE-2020-8788: Synaptivemedical Clearcanvas

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report.

Affected products

• Synaptivemedical Clearcanvas: version 3.0 only

Published 2020-02-07. Last modified 2026-06-17.