{"id":"CVE-2022-40317","details":"OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.","modified":"2026-08-12T03:51:41.499595012Z","published":"2022-09-09T16:45:31Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40317.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40317.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40317"},{"type":"FIX","url":"https://github.com/openkm/document-management-system/pull/336"},{"type":"PACKAGE","url":"https://github.com/izdiwho/CVE-2022-40317"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openkm/document-management-system","events":[{"introduced":"d7abb2546b5bdab871c74d5af3638e3428f45909"},{"last_affected":"d7abb2546b5bdab871c74d5af3638e3428f45909"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:openkm:openkm:6.3.11:*:*:*:*:*:*:*","extracted_events":[{"introduced":"6.3.11"},{"last_affected":"6.3.11"}]}}],"versions":["6.3.11","v6.3.11"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-40317.json"}}],"schema_version":"1.9.0"}