CVE-2024-22213

Name of the Vulnerable Software and Affected Versions Nextcloud Deck versions prior to 1.9.5 Nextcloud Deck versions prior to 1.11.2

Description The issue allows users to be tricked into executing malicious code in their browser via HTML sent as a comment. This is a problem with the way the application handles comments, allowing for the execution of malicious HTML code.

Recommendations For versions prior to 1.9.5, upgrade to version 1.9.5 or later. For versions prior to 1.11.2, upgrade to version 1.11.2 or later. As a temporary workaround, consider restricting the use of HTML in comments until a patch is available.