title: LogicalDOC Document Version Comment Stored XSS
description: LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
defaultStatus: unaffected
product: LogicalDOC Enterprise
vendor: LogicalDOC
versions:
lessThanOrEqual: 8.8.2, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: LogicalDOC Community Edition
vendor: LogicalDOC
versions:
lessThanOrEqual: 8.7.3, status: affected, version: 0, versionType: semver
}
