← All advisories

Unrated severityNVD Advisory· Published Oct 24, 2022· Updated May 7, 2025

CVE-2022-40690

CVE-2022-40690

Description

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Bookstackapp/Bookstackapp/bookstackllm-fuzzy
Range: <v22.09
BookStack/BookStackv5
Range: versions prior to v22.09

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.