CVE-2023-50072

CVE-2023-50072 A stored cross-site scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

Cross site scripting

A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

Exploit for Cross-site Scripting in Openkm

CVE-2023-50072 A stored cross-site scripting XSS vulnerabil...

PT-2023-8008 · Openkm · Openkm

Name of the Vulnerable Software and Affected Versions: OpenKM version 7.1.40 Description: A Stored Cross-Site Scripting XSS issue exists that allows an authenticated user to upload a note on a file, which acts as a stored XSS payload. Any user who opens the note of a document file will trigger th...