OpenKM Community Edition 6.3.12 contains a stored cross-site scripting (XSS) vulnerability in the user account creation interface. The vulnerability allows script tags to be injected via the Name field and through the Email field when the POST request is manipulated to include encoded script tags, bypassing frontend validation.