Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.4
CVE-2022-47418: LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments.
CVE-2022-47418 · published 3 years ago
Summary
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| logicaldoc | logicaldoc |
8.7.3 8.8.2 cpe:2.3:a:logicaldoc:logicaldoc:8.7.3:*:*:*:community:*:*:* |
Original advisory text
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments.
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments.
References
- https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-thro... Exploit Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published7 Feb 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-47418 · NVD
Track software like this
Free during beta