CVE-2022-28479

SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS

published June 6, 2022

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin privileges can inject the payload inside the "Role management" menu and then trigger the payload by loading the "Users management" menu

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00584 · 47.2th percentile
Published
2022-06-06T22:17Z
EPSS history
Timeline
  • 06 JUN 22:17Z
    SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS
    cvelistv5