Description
Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenKM | OpenKM | 6.3.12 | — |
Medium · 5.4
CVE-2022-47413
EUVD-2022-50176GHSA-7qcw-gg9p-56xr
Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.
Published Feb 7, 2023 · Updated Mar 25, 2025 · Assigned by rapid7