CVE-2022-40317

Name of the Vulnerable Software and Affected Versions OpenKM version 6.3.11

Description The issue allows stored XSS related to the javascript: substring in an A element. This could potentially lead to malicious script execution when a user interacts with the affected element.

Recommendations For OpenKM version 6.3.11, consider disabling the use of javascript: substrings in A elements until a patch is available. Restrict access to areas where such substrings could be injected to minimize the risk of exploitation.