CVE-2022-40690: Bookstackapp Bookstack

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

Affected products

• Bookstackapp Bookstack: before 22.09 (fixed in 22.09)

Published 2022-10-24. Last modified 2026-06-17.