Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-02-07
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-02-07