Monkiki

An issue in OpenKM allows attackers to obtain sensitive information via the `XMLTextExtractor` function.

The issue allows stored XSS related to the javascript: substring in an A element. This could potentially lead to malicious script execution when a user interacts with the affected element.

The issue concerns an authenticated Cross-site scripting (XSS) vulnerability. A remote attacker could exploit this by injecting arbitrary code via the `uuid` parameter.