CVE-2019-11818

Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User…

published May 8, 2019

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00765 · 55.0th percentile
Published
2019-05-08T15:34Z
EPSS history
Timeline
  • 08 MAY 15:34Z
    Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User…
    cvelistv5