En bref
- CVE-2019-11818 est une vulnérabilité MOYENNE (CVSS 6.1) touchant org.opencms:opencms-core, opencms (alkacon).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.77%, plus élevée que 55.5% des vulnérabilités.
- Correctif : mettre à jour vers 11.0.0 ou plus récent.
Description
Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.
NVD description
Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.
Autres vulnérabilités de org.opencms:opencms-core
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free