← Database

CVE-2021-3628

MEDIUM CVSS: 4.6 Published: 2021-08-30 Modified: 2026-06-17

Description

OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnerability by injecting arbitrary code via de uuid parameter.

Affected Platforms

Openkm Openkm

Weakness Type

CWE-79, CWE-79

References