En resumen
- CVE-2019-11818 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.opencms:opencms-core, opencms (alkacon).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.77%, mayor que el 55.4% de las vulnerabilidades.
- Solución: actualizar a 11.0.0 o posterior.
Description
Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.
NVD description
Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.
Más vulnerabilidades de org.opencms:opencms-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free