{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"mayan-edms","cve_ids":["CVE-2014-3840"],"ecosystem":"PyPI","epss":0.03505,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wpvx-26f7-65q3","id":"tcs_01M5KG2MVWCJNKC86VA34XPHM4","modified_at":"2026-09-10T03:49:43.332931424Z","published_at":"2022-05-17T04:41:54Z","references":["https://osv.dev/vulnerability/GHSA-wpvx-26f7-65q3","https://nvd.nist.gov/vuln/detail/CVE-2014-3840","https://github.com/mayan-edms/mayan-edms/issues/3","https://github.com/mayan-edms/mayan-edms/commit/398c480c10416d76e7c1dcb607e726e8fc988e72","https://github.com/mayan-edms/Mayan-EDMS","https://github.com/pypa/advisory-database/tree/main/vulns/mayan-edms/PYSEC-2014-110.yaml","http://research.openflare.org/advisories/OF-2014-09/mayan-edbs-storedxss.txt","http://research.openflare.org/poc/maya-edms/maya-edms_multiple_xss.avi","http://seclists.org/oss-sec/2014/q2/349","http://seclists.org/oss-sec/2014/q2/352","http://www.exploit-db.com/exploits/33493"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wpvx-26f7-65q3","url":"https://osv.dev/vulnerability/GHSA-wpvx-26f7-65q3"}],"summary":"Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities"}