XSS in search engine

MEDIO 6.1CVE-2019-13234 · GHSA-fxp8-7h5w-h235 · Published 27/08/2019 · updated 17/06/2026

En resumen

CVE-2019-13234 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.opencms:opencms-core, opencms apollo template (alkacon).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.9%, mayor que el 87.0% de las vulnerabilidades.
Solución: actualizar a 11.0.1 o posterior.

Package	Affected versions	Patched versions
org.opencms:opencms-core Maven	`< 11.0.1`	`11.0.1`
opencms apollo template alkacon	`= 10.5.4= 10.5.5`	No fix yet

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

NVD description

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 11.0.1

11.0.1

= 10.5.4= 10.5.5

No fix yet

Más vulnerabilidades de org.opencms:opencms-core

Ver todo →