Nextcloud · Report #3357808
Stored XSS Vulnerability via SVG File
Validstatus
mediumseverity
$150bounty
79upvotes
5 Dec 2025disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qcw2-p26m-9gc5
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.