Unrated
ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.'
CVE-2020-16255
First seen on SecPulse
References
- advisory owncloud.com
- advisory owncloud.org