CVE-2022-28051

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p55

Published

Jun 6, 2022 (Jun 6, 2022)

Modified

Jun 17, 2026

Description

The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code.

Vendors: seeddms
Products: seeddms
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.