PT-2015-4134

Name of the Vulnerable Software and Affected Versions OpenKM versions prior to 6.4.19 build 23338 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the Subject field in a Task to "frontend/index.jsp". Recommendations For...

CVE-2014-9017: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in OpenKM before 6.4.19 build 23338 allows remote authenticated users to inject arbitrary web script or HTML via the Subject field in a Task to frontend/index.jsp...