CVE-2022-47416

creationtimestamp| type| source ---|---|--- 2023-02-08 00:24:22+00:00| seen| https://t.me/cibsecurity/57711 2023-02-09 11:49:14+00:00| seen| https://t.me/itsecnews/2163...

CVE-2022-47416 LogicalDOC Chat Stored XSS

LogicalDOC Enterprise is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app chat system...

CVE-2022-47416

Technical details for CVE-2022-47416 are not provided in the connected documents. The Initial Description notes a stored XSS in LogicalDOC Enterprise's in-app chat; no product versions, impact, or remediation are detailed here. Monitor for updates.

Multiple DMS XSS (CVE-2022-47412 through CVE-20222-47419)

Through the course of routine security testing and analysis, Rapid7 has discovered several issues in on-premises installations of open source and freemium Document Management System DMS offerings from four vendors. While all of the discovered issues are instances of CWE-79: Improper Neutralizatio...