Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2
{
"cpes": [
"cpe:2.3:a:alfresco:alfresco:5.2:*:*:*:community:*:*:*"
],
"severity": "Medium"
}