GCVE - cpe:2.3:a:seeddms:seeddms:6.0.18:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:seeddms:seeddms:6.0.18:*:*:*:*:*:*:*

part: a version: 6.0.18 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/knitter/seeddms-alt`	purl2cpe	2026-06-01 10:11:30.400503
`pkg:sourceforce/seeddms`	purl2cpe	2026-06-01 10:11:30.400504

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-28479`	vulnerable	2026-06-08 05:42:44.549805	Details available SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin privileges can inject the payload inside the "Role management" menu and then trigger the payload by loading the "Users management" menu Published: 2022-06-06T22:17:23.000Z Updated: 2024-08-03T05:56:15.384Z Open on db.gcve.eu Reference links https://sourceforge.net/p/seeddms/code/ci/9e92524fdbd1e7c3e6771d669f140c62389ec375/ https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/tree/main/CVE-2022-28479	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28051`	vulnerable	2026-06-08 05:42:44.004347	Details available The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to stored XSS which allows an attacker to inject malicious javascript code. Published: 2022-06-06T22:17:40.000Z Updated: 2024-08-03T05:41:11.386Z Open on db.gcve.eu Reference links https://sourceforge.net/p/seeddms/code/ci/6fc17be5d95e8f00fbe5c124c4acd377fa2ce69d/ https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/blob/main/CVE-2022-28051/README.md https://github.com/looCiprian/Responsible-Vulnerability-Disclosure/tree/main/CVE-2022-28051	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.