Back to Database
Status published
Unknown
CVE-2022-47415
LogicalDOC Messaging Stored XSS
Vulnerability Description
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both subject and message bodies).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-47415
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Matthew Kienow
References
More from LogicalDOC
View All →CVE-2025-12547
LogicalDOC Community Edition Admin Login login.jsp excessive authentication
Medium
6.3
CVE-2025-12546
LogicalDOC Community Edition API Key creation UI cross site scripting
Medium
5.1
CVE-2025-11946
LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
Medium
5.1
CVE-2024-54449
Remote Code Execution (RCE) via Arbitrary File Write In Document API
High
8.7
CVE-2024-54448
Remote Code Execution (RCE) via Automation Scripting
High
8.6
Affected Vendor
LogicalDOC
View all reports →Affected Software
LogicalDOC Enterprise, LogicalDOC Community Edition
Vulnerable Versions:
0
Timeline
Official Publish:
February 7th, 2023
Last Modified:
March 25th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available