de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +107 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (>=8.0.1, <=9.5.3)

org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2024-41446 Source advisory: SNYK:JAVA-ORGOPENCMS-9802335...

CVE-2024-41446

creationtimestamp| type| source ---|---|--- 2025-04-21 14:54:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndgahzxwr2b 2025-04-21 15:02:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12667 2025-04-21 18:09:25+00:00| seen|...

CVE-2024-41446

The CVE-2024-41446 entry concerns a stored XSS in Alkacon OpenCMS v17.0. The vulnerability affects the image parameter under the Create/Modify article function, allowing an attacker to inject arbitrary web scripts or HTML and potentially execute them in a victim’s browser. The provided technical ...

CVE-2024-41446

A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...