Lokesh1095

**Name of the Vulnerable Software and Affected Versions** Mayan EDMS versions prior to 3.0.2 **Description** An issue was discovered where the Appearance app sets window.location directly, leading to a potential XSS issue. **Recommendations** For versions prior to 3.0.2, update to version 3.0.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mayan EDMS versions prior to 3.0.2 **Description** An issue was discovered in the Cabinets app, which has a cross-site scripting (XSS) vulnerability via a crafted cabinet label. **Recommendations** For versions prior to 3.0.2, update to version 3.0.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mayan EDMS versions prior to 3.0.3 **Description** An issue was discovered in the Tags app, where tag label values are mishandled, leading to XSS. **Recommendations** For versions prior to 3.0.3, update to version 3.0.3 or later to resolve the issue.