CVE-2022-28051

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jun 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-280528.0Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attacke CVE-2022-280538.8Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attacker CVE-2022-280549.8Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via CVE-2022-280559.8Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.CVE-2022-280569.8ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php CVE-2022-280588.1Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.CVE-2022-280598.1Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.CVE-2022-28065.5It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collec CVE-2022-280607.5SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php.CVE-2022-280628.8Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell CVE-2022-280634.9Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.CVE-2022-280678.6An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service (DoS) in the Sandbox via a cra