What is GHSA-gj9c-69cm-7c37?

GHSA-gj9c-69cm-7c37 is a security advisory published by GitHub Security Advisories with Low severity. Alkacon OpenCms XSS via unsanitized message body

Which CVE IDs does GHSA-gj9c-69cm-7c37 cover?

GHSA-gj9c-69cm-7c37 covers the following CVE IDs: CVE-2006-3933. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-gj9c-69cm-7c37?

GHSA-gj9c-69cm-7c37 affects 1 product, including: maven/org.opencms:opencms-core:\u003c 6.2.2.

GHSA-gj9c-69cm-7c37Low

Alkacon OpenCms XSS via unsanitized message body

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

June 20, 2025

🔗 CVE IDs covered (1)

CVE-2006-3933 →

📋 Description

Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.

🎯 Affected products1

maven/org.opencms:opencms-core:< 6.2.2

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2006-3933
https://exchange.xforce.ibmcloud.com/vulnerabilities/28033
http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt
http://securityreason.com/securityalert/1302
http://www.opencms.org/opencms/en/shownews.html?id=1002
https://github.com/alkacon/opencms-core/commit/e2d3754ef27e8e8e122700bdb3f59e6e15995bae
https://github.com/advisories/GHSA-gj9c-69cm-7c37