~ / search / GHSA-7qqr-3pj3-q2f5

GHSA-7qqr-3pj3-q2f5

XSS issues in the management interface

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-13236

Packages

EcosystemPackageAffectedFixed in
Maven org.opencms:opencms-core < 11.0.1 11.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.

References

External links from the advisory. They lead to third-party sites.