CVE-2023-50072

CVE-2023-50072 A stored cross-site scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

EUVD-2023-54902

Malicious code in bioql PyPI...

CVE-2023-50072: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

CVE-2023-50072

A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

PT-2018-9194

Name of the Vulnerable Software and Affected Versions: Video Downloader professional extension versions prior to 2018-04-05 Description: The issue is related to Universal XSS UXSS via vectors connected to a link64 msgAddLinks event. Recommendations: For versions prior to 2018-04-05, update the...