Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2
{ "cpes": [ "cpe:2.3:a:alfresco:alfresco:5.2:*:*:*:community:*:*:*" ], "severity": "Medium" }