Open Source Document Management System | OpenKM

Hi,

From which OpenKM Community Edition following vulnerabilities are fixed,

CVE-2014-8957
Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 allows remote authenticated users to inject arbitrary web script or HTML via the Tasks parameter.


V2: 3.5 LOW
CVE-2014-9017
Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 (build 23338) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field in a Task to frontend/index.jsp.
?

I think all of these are solved into community edition. We added a class for cleaning XSS.

It's supposed to be fixed, but if you can reproduce any of them, please open a issue at https://github.com/openkm/document-mana ... tem/issues

Regards.