CVE-2013-1822

no score yetEPSS 0.7%

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the (1) quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin privileges to inject arbitrary web script or HTML via the (2) group field to settings.php or (3) "share with" field.

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-03-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

owncloud:owncloud_server

References

http://owncloud.org/about/security/advisories/oC-SA-2013-008/
http://owncloud.org/about/security/advisories/oC-SA-2013-008/

Check your stack JSON