Approved changes feed: RSS · Atom

cpe:2.3:a:suitenumerique:docs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSuitenumerique (b13e27e9-f009-5b92-ba35-6889d87aa227)
ProductDocs (ce9b3fe5-26d9-53c8-b275-10b40a3eb3d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22867 vulnerable 2026-06-08 07:51:14.045720 LaSuite Doc affected by Stored XSS via Interlinking Block
HIGH (8.7)
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 3.8.0 to 4.3.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Interlinking feature. When a user creates a link to another document within the editor, the URL of that link is not validated. An attacker with document editing privileges can inject a malicious javascript: URL that executes arbitrary code when other users click on the link. This vulnerability is fixed in 4.4.0.
Published: 2026-01-15T16:31:34.397Z
Updated: 2026-01-15T16:46:57.161Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.