Em resumo
- CVE-2019-11818 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta org.opencms:opencms-core, opencms (alkacon).
- Chance de exploração nos próximos 30 dias (EPSS): 0.77%, maior que 55.4% das vulnerabilidades.
- Correção: atualize para 11.0.0 ou posterior.
Description
Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.
NVD description
Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.
Mais vulnerabilidades de org.opencms:opencms-core
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free