Vulnerability CVE-2022-40690
Published: 2022-10-24

Description:
Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

 References:
https://www.bookstackapp.com/docs/admin/security/#using-bookstack-content-externally
https://www.bookstackapp.com/blog/bookstack-release-v22-09/
https://jvn.jp/en/jp/JVN78862034/index.html
Copyright 2026, cxsecurity.com

 

Back to Top