CVE-2022-47414: Improper Neutralization of Input During Web Page Generation

If an attacker has access to the console for OpenKM and is authenticated, a stored XSS vulnerability is reachable in the document "note" functionality...