> CVE-2025-57244

« BACK_TO_HOME
PUBLISHED
2025-11-05 17:15
MODIFIED
2025-11-05 17:15
EPSS (Prob. Exploit)
0.22%
Top 88.6%
DATA SOURCES:
NVD 🔗 2025-11-05 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-03-01

> DESCRIPTION

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
11 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/11/2025 17:15
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://github.com/wolffangsecurity/CVEs/blob/main/Stored%20XSS%20via%20Input%20...
https://github.com/wolffangsecurity/CVEs/tree/main/CVE-2025-57244
« BACK_TO_HOME