625 matches found
org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2024-42699 via org.opencms:opencms-core (8.0.4)
org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2024-42699 Source advisory: OSV:GHSA-H75C-F2XX-9VXV...
org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (9.5.0)
org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...
org.opencms.modules:com.alkacon.opencms.v8.event (>=8.5.0, <=8.5.1), org.opencms.modules:com.alkacon.opencms.v8.flexible (>=8.5.0, <=8.5.1) +63 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.5.0)
org.opencms:opencms-core MAVEN version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event =8.5.0, =8.5.0, =8.5.0, =8.5.0, =8.0.2.1, =8.5.0, =8.5.0,...
org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.0.4)
org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2024-41446 Source advisory: OSV:GHSA-7M3W-M5G3-CC88...
org.opencms.modules:com.alkacon.opencms.v8.article (>=8.0.1, <=8.0.4), org.opencms.modules:com.alkacon.opencms.v8.event (>=8.0.1, <=8.0.3) +65 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.0.1)
org.opencms:opencms-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.article =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1,...
de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +107 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (>=8.0.1, <=9.5.3)
org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2024-41446 Source advisory: SNYK:JAVA-ORGOPENCMS-9802335...
GHSA-7M3W-M5G3-CC88 OpenCMS cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
OpenCMS cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
de.eonas.portal:opencmsinstaller (8.5.1.1), de.eonas.portal:opencmsportaldriver (>=8.5.1.1, <=9.0.0.7) +12 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.5.1)
org.opencms:opencms-core MAVEN version 8.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 8.5.1.1 - de.eonas.portal:opencmsportaldriver =8.5.1.1, =9.0.0.7 -...
CVE-2024-42699
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field...
CVE-2024-41446
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
CVE-2024-41446
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
CVE-2024-41446
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
CVE-2024-42699
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field...
CVE-2025-28099
opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,...
CVE-2024-42699: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field...
CVE-2024-41446: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
CVE-2025-28099: Improper Limitation of a Pathname to a Restricted Directory
opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,...
CVE-2024-41446
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...