CVE-2022-40317

OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.

Source: CVE-2022-40317