OpenCMS - Cross-Site Scripting

OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. id: CVE-2023-42343 info: name: OpenCMS - Cross-Site Scripting author: DhiyaneshDK severity: medium description: | OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. impact: | Unauthenticated attackers...

CVE-2023-42343

Alkacon OpenCms versions prior to 10.5.1 are vulnerable to a Cross-Site Scripting (XSS) vulnerability via the cmis-online/type module. The root cause is a lack of sufficient measures to protect the website structure, specifically allowing unauthenticated attackers to inject malicious JavaScript t...