Vulnerabilidades do Openkm Openkm

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Openkm Openkm: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:openkm:openkm

CVE-2025-57244 Média · 5.4 CWE-79 05/11/2025

Cross-site Scripting (XSS) em Openkm

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation.