2 matches found
CVE-2013-4600
Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...
6.3CVSS0.01871EPSS
SaveExploits3References7
CVE-2013-4600: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...
4.3CVSS5.9AI score0.01871EPSS
SaveExploits3References2
20