medium5.4
CVE-2022-47415
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messa…
Impact
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both subject and message bodies).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Logicaldoc | Logicaldoc | Versions 8.7.3, 8.8.2 |