medium5.4
CVE-2022-47414
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
Impact
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openkm | Openkm | Version 6.3.12 |