Cross-site Scripting (XSS)

opencms-gwt is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the generateTooltipHtml function of CmsResultItemWidget.java, which allows an attacker to inject and execute malicious javascript or HTML through the Title field under the upload image module...

de.eonas.portal:opencmsinstaller (9.5.2.0), de.eonas.portal:opencmsportaldriver (9.5.2.0) +21 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (9.5.2)

org.opencms:opencms-core MAVEN version 9.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.2.0 - de.eonas.portal:opencmsportaldriver 9.5.2.0 -...