CVE-2023-50072

CVE-2023-50072 В OpenKM версии 7.1.40 dbb6e88 с профессиональным расширением существует уязвимость хранимого межсайтового скриптинга XSS, которая позволяет аутентифицированному пользователю загрузить заметку к файлу, действующую как хранимая XSS-нагрузка. Любой пользователь, открывший заметку фай...

EUVD-2023-54902

Malicious code in bioql PyPI...

CVE-2023-50072

A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

CVE-2023-50072: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...