Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.16 and 5.x before 5.0.7 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to shared files.
| Software | From | Fixed in |
|---|---|---|
| owncloud / owncloud | - | 4.0.16 |
| owncloud / owncloud_server | 5.0.0 | 5.0.7 |