GHSA-g4fc-j79q-gjrhLow

Alkacon OpenCms XSS via username during login

Published
May 1, 2022
Last Modified
June 20, 2025

🔗 CVE IDs covered (1)

CVE-2005-4294 →

📋 Description

Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.

🎯 Affected products1

  • maven/org.opencms:opencms-core:< 6.0.3

🔗 References (5)