ahrixia/CVE-2023-50072

ahrixia/CVE-2023-50072

GitHubGitHub
GitHubgithub.com
Releases0
Stars4
A stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-50072↗
5.4 MEDIUM—

A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS.