CVE-2025-57244: XSS
OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57244?
CVE-2025-57244 is classified as a medium severity vulnerability due to its potential to allow stored cross-site scripting (XSS) attacks.
How do I fix CVE-2025-57244?
To fix CVE-2025-57244, update OpenKM Community Edition to a version that addresses this stored XSS vulnerability.
What type of vulnerability is CVE-2025-57244?
CVE-2025-57244 is a stored cross-site scripting (XSS) vulnerability present in the user account creation interface of OpenKM Community Edition.
In which version of OpenKM is CVE-2025-57244 present?
CVE-2025-57244 is present in OpenKM Community Edition version 6.3.12.
What fields are affected by CVE-2025-57244?
The Name and Email fields in the user account creation interface are affected by CVE-2025-57244.