Description
Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BookStack | BookStack | versions prior to v22.09 | — |
Medium · 5.4
CVE-2022-40690
EUVD-2022-43961GHSA-fxr6-45h7-wgcx
Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scri…
Published Oct 24, 2022 · Updated May 7, 2025 · Assigned by jpcert