CVE-2025-57244

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting XSS in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation...

EUVD-2025-37895

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting XSS in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation...

CVE-2025-57244

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) within the user account creation interface. The vulnerability arises from insufficient front-end validation , where the Name field accepts script tags and the Email field is susceptible when a POST request is modif...

CVE-2025-57244: Improper Neutralization of Input During Web Page Generation

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting XSS in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation...

OpenKM Community Edition security vulnerabilities

OpenKM Community Edition is a document management system from the Spanish company OpenKM. A security vulnerability exists in OpenKM Community Edition version 6.3.12, which stems from insufficient front-end validation of the Name field and Email field in the user account creation screen and could...

EUVD-2014-8784

Malware in sbrugna...

EUVD-2014-8845

Malware in sbrugna...

EUVD-2008-2223

Malware in sbrugna...

EUVD-2021-20621

Malware in sbrugna...

EUVD-2012-2309

Malware in sbrugna...

EUVD-2021-26931

Malware in sbrugna...

EUVD-2022-34416

Malicious code in bioql PyPI...

EUVD-2023-54902

Malicious code in bioql PyPI...

EUVD-2022-43608

Malicious code in bioql PyPI...

EUVD-2022-50176

Malicious code in bioql PyPI...

EUVD-2024-35341

Malicious code in bioql PyPI...

EUVD-2022-43301

Malicious code in bioql PyPI...

EUVD-2022-50177

Malicious code in bioql PyPI...

CVE-2022-40317

OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element...

CVE-2022-3969

A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function getFileExtension of the file src/main/java/com/openkm/util/FileUtils.java. The manipulation leads to insecure temporary file. Upgrading to version 6.3.12 is able to address this...