Lucene search
Veracode Vulnerability DatabaseVERACODE:40637HistoryMay 23, 2023 - 2:49 a.m.
Cross-site Scripting (XSS)
2023-05-2302:49:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
opencms-gwt
cross-site scripting
generatetooltiphtml
cmsresultitemwidget.java
title field
upload image module
software
EPSS
0.001
Percentile
34.5%
opencms-gwt is vulnerable to Cross-site Scripting (XSS). The vulnerability exists in the generateTooltipHtml function of CmsResultItemWidget.java, which allows an attacker to inject and execute malicious javascript or HTML through the Title field under the upload image module.
Related
github
github
alkacon-OpenCMS vulnerable to stored Cross-site Scripting
2023-05-16 21:30:23
cve
cve
CVE-2023-31544
2023-05-16 21:15:09
cvelist
cvelist
CVE-2023-31544
2023-05-16 00:00:00
osv
osv
CVE-2023-31544
2023-05-16 21:15:09
alkacon-OpenCMS vulnerable to stored Cross-site Scripting
2023-05-16 21:30:23
prion
prion
Cross site scripting
2023-05-16 21:15:00
nvd
nvd
CVE-2023-31544
2023-05-16 21:15:09