EPSS
Percentile
61.2%
opencms-core is vulnerable to cross-site scripting (XSS) attack. The sanitization of input parameters are not done properly in system/workplace/ , allowing multiple XSS attacks in the management interface.
packetstormsecurity.com/files/154283/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.html
aetsu.github.io/OpenCms
github.com/alkacon/opencms-core/commits/branch_10_5_x
twitter.com/aetsu
twitter.com/aetsu/status/1152096227938459648