| Package | Affected versions | Patched versions |
|---|---|---|
| org.opencms:opencms-core | ≥ 14.0.0, < 16.0.0 | 16.0.0 |
| opencms | ≥ 14.0.0, < 16.0.0 | 16.0.0 |
Cross-site scripting (XSS) vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to a victim and partially take control of their browsing session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free