CVE-2022-28051

Name of the Vulnerable Software and Affected Versions SeedDMS versions 5.1.25 through 6.0.18

Description The issue affects the "Add category" functionality inside the "Global Keywords" menu, allowing an attacker to inject malicious javascript code through stored XSS.

Recommendations For versions 5.1.25 through 6.0.18, consider disabling the "Add category" functionality until a patch is available to prevent exploitation. Restrict access to the "Global Keywords" menu to minimize the risk of stored XSS attacks. Avoid using the "Add category" feature in the affected versions until the issue is resolved.