CVE-2024-46409: Seeddms

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page.

Affected products

• Seeddms Seeddms: version 6.0.28 only

Published 2024-10-04. Last modified 2026-06-17.