GHSA-w3v2-vfrj-j9g8Low

Alkacon Open CMS XSS via Logfile Viewer Settings function

Published
May 1, 2022
Last Modified
June 20, 2025

🔗 CVE IDs covered (1)

CVE-2008-1300 →

📋 Description

Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045.

🎯 Affected products1

  • maven/org.opencms:opencms-core:>= 7.0.3, < 7.0.5

🔗 References (4)