~ / search / GHSA-2p6p-v69p-9mm9

GHSA-2p6p-v69p-9mm9

XSS in login form

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-13235

Packages

EcosystemPackageAffectedFixed in
Maven org.opencms:opencms-core < 11.0.1 11.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

References

External links from the advisory. They lead to third-party sites.