cve/2022/CVE-2022-28051.md

CVE-2022-28051

Description

The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code.

POC

Reference

• https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/blob/main/CVE-2022-28051/README.md
• https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/tree/main/CVE-2022-28051

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/looCiprian/Responsible-Vulnerability-Disclosure