vulnerability xss
severity 7.3
language python
registry pypi

:book: Description

Papermerge is an open source document management system (DMS) primarily designed for archiving and retrieving your digital documents. Instead of having piles of paper documents all over your desk, office or drawers - you can quickly scan them and configure your scanner to directly upload to Papermerge DMS.. This package is vulnerable for (XSS).

:recycle: Steps To Reproduce-:

  1. clone or use demo
  2. add jscode in meta form. Payload used : "><img src=x onerror=alert(137)>

:telescope: POC

💥 Impact