Browse CVEs

MEDIUM 6.1 CVE-2026-2736 Reflected Cross-site Scripting (XSS) in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in the victim's browser by sendi… Opencms Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.4 CVE-2026-2735 Stored Cross-Site Scripting (XSS) in Alkacon's OpenCms v18.0, which occurs when user input is not properly validated when sending a POST request to ‘… Opencms Mitigation only Fix from $1,6002026-02-19 MEDIUM 6.5 CVE-2024-42699 Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via … Opencms No fix yet Fix from $1,6002025-04-21 MEDIUM 5.4 CVE-2024-41446 A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted pa… Opencms No fix yet Fix from $1,6002025-04-21 MEDIUM 5.4 CVE-2024-41447 A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted pa… Opencms No fix yet Fix from $1,6002025-04-18 MEDIUM 6.4 CVE-2024-5521 Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could allow a user having the roles of… Opencms Mitigation only Fix from $1,6002024-05-30 MEDIUM 5.4 CVE-2024-5520 Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could allow a user with sufficient pri… Opencms Mitigation only Fix from $1,6002024-05-30 MEDIUM 6.1 CVE-2023-37602 An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via … Opencms No fix yet Fix from $1,6002023-07-20 MEDIUM 6.5 CVE-2021-3312 An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfil… Opencms No fix yet Fix from $1,6002021-10-08 HIGH 8.8 CVE-2018-8811 Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack … Opencms No fix yet Fix from $1,9502018-03-20 MEDIUM 6.8 CVE-2005-4475 Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified … Opencms Mitigation only Fix from $1,6002005-12-22