← Database

CVE-2022-47414

MEDIUM CVSS: 5.4 Published: 2023-02-07 Modified: 2026-06-17

Description

If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.

Affected Platforms

Openkm Openkm

Weakness Type

CWE-79, CWE-79

References