CVE-2022-28051

The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code...

CVE-2022-28051

creationtimestamp| type| source ---|---|--- 2022-06-07 02:30:29+00:00| seen| https://t.me/cibsecurity/43905...

CVE-2022-28051

SeedDMS versions 6.0.18 and 5.1.25 are affected by a stored XSS in the Add category function of the Global Keywords menu. The vulnerability arises when user-supplied input is stored and later reflected in the UI, enabling injection of JavaScript. Documented by NVD as CVE-2022-28051 with CVSS v3.1...