CVE-2024-42699

A Cross-Site Scripting (XSS) vulnerability exists in Alkacon OpenCMS version 17.0 within the Create/Modify article function. A remote attacker can inject a javascript payload by targeting the image title sub-field located inside the image field. Practical consequences include the execution of mal...