CVE-2022-28051: Seeddms

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code.

Affected products

• Seeddms Seeddms: version 5.1.25 only; version 6.0.18 only

Published 2022-06-06. Last modified 2026-06-17.