← All advisories

Medium severity5.4NVD Advisory· Published Oct 24, 2022· Updated Jun 17, 2026

CVE-2022-40690

CVE-2022-40690

Description

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Bookstackapp/Bookstackapp/bookstackllm-fuzzy
Range: <v22.09
BookStack/BookStackv5
Range: versions prior to v22.09
Bookstackapp/Bookstack
cpe:2.3:a:bookstackapp:bookstack:*:*:*:*:*:*:*:*
Range: <22.09

Patches

Vulnerability mechanics

References

3

jvn.jp/en/jp/JVN78862034/index.htmlnvdRelease NotesThird Party Advisory
www.bookstackapp.com/blog/bookstack-release-v22-09/nvdRelease NotesVendor Advisory
www.bookstackapp.com/docs/admin/security/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.