Description
LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app chat system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LogicalDOC | LogicalDOC Enterprise | ≤ 8.8.2 | — |
Medium · 5.4
CVE-2022-47416
EUVD-2022-50179GHSA-h98q-9vm9-92vw
LogicalDOC Chat Stored XSS
Published Feb 7, 2023 · Updated Mar 25, 2025 · Assigned by rapid7