Artfical
Security Intelligence
Türkçe
English
Deutsch
Français
Español
Русский
العربية
中文
日本語
한국어
Português
Italiano
فارسی
हिन्दी
Nederlands
Polski
Українська
Ελληνικά
Azərbaycan
Svenska
Indonesia
Tiếng Việt
ภาษาไทย
Română
Čeština
Magyar
עברית
Suomi
Norsk
Dansk
← Database
CVE-2022-40317
MEDIUM
CVSS:
5.4
Published: 2022-09-09
Modified: 2026-06-17
Description
OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.
Affected Platforms
Openkm Openkm
Weakness Type
CWE-79
References
https://github.com/izdiwho/CVE-2022-40317
https://github.com/openkm/document-management-system/pull/336
https://github.com/izdiwho/CVE-2022-40317
https://github.com/openkm/document-management-system/pull/336