Alkacon OpenCms is an open source content management system (CMS) developed in Java.Alkacon OpenCms is vulnerable to an XML external entity vulnerability that can be exploited by attackers to steal files from the server’s file system by uploading crafted SVG documents.