CVE-2021-3628

Published August 30th, 2021

View on NVD ↗

CVSS v3

4.6

MEDIUM

CVSS v2

3.5

LOW

Affected

PROJECT

Description

OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnerability by injecting arbitrary code via de uuid parameter.

openkm/document-management-system

OpenKM is a Open Source Document Management System

GitHub

844