CVE-2022-47415

CVE-2022-47415: LogicalDOC Messaging Stored XSS

Vendor Logicaldoc
Product LogicalDOC Enterprise
Weakness CWE-79 · XSS
Published February 7, 2023
Last update March 25, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both subject and message bodies).

Key dates

02Disclosure timeline

February 7, 2023 CVE published
March 25, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-12701 WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting CVE-2024-5266 Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes CVE-2023-41863 WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS) CVE-2022-3015 oretnom23 Fast Food Ordering System cross site scripting CVE-2022-3408 WP Word Count <= 3.2.3 - Admin+ Stored Cross-Site Scripting