CVE-2023-50072

CVE-2023-50072 Esiste una vulnerabilità di cross-site scripting XSS persistente in OpenKM versione 7.1.40 dbb6e88 con Professional Extension che consente a un utente autenticato di caricare una nota su un file che funge da payload XSS persistente. Qualsiasi utente che apre la nota di un file...

Cross site scripting

A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

Exploit for Cross-site Scripting in Openkm

CVE-2023-50072 A stored cross-site scripting XSS vulnerabil...

PT-2023-8008 · Openkm · Openkm

Name of the Vulnerable Software and Affected Versions: OpenKM version 7.1.40 Description: A Stored Cross-Site Scripting XSS issue exists that allows an authenticated user to upload a note on a file, which acts as a stored XSS payload. Any user who opens the note of a document file will trigger th...