CVE-2022-40317: Openkm

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.

Affected products

• Openkm Openkm: version 6.3.11 only

Published 2022-09-09. Last modified 2026-06-17.