CVE-2019-13236 - In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface

MEDIUM

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface

Published Aug 27, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 3.11%

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
http://packetstormsecurity.com/files/154283/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.html		x_refsource_MISC
https://aetsu.github.io/OpenCms		x_refsource_MISCExploitThird Party Advisory
https://github.com/advisories/GHSA-7qqr-3pj3-q2f5		Advisory
https://github.com/alkacon/opencms-core/commits/branch_10_5_x		x_refsource_MISCPatch
https://nvd.nist.gov/vuln/detail/CVE-2019-13236
https://twitter.com/aetsu/status/1152096227938459648		x_refsource_MISCThird Party Advisory