CVE-2022-25629

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt