Alkacon / Opencms
32 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-2736 | Reflected Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2026-2735 | Stored Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms | MEDIUM | 5.1 | Feb 19, 2026 |
| CVE-2024-42699 | Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image titl… | LOW | 2.0 | Apr 21, 2025 |
| CVE-2024-41446 | A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inje… | MEDIUM | 5.4 | Apr 21, 2025 |
| CVE-2024-41447 | A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inje… | MEDIUM | 5.4 | Apr 18, 2025 |
| CVE-2024-5521 | Cross-Site Scripting stored in Alkacon OpenCMS | MEDIUM | 6.4 | May 30, 2024 |
| CVE-2024-5520 | Cross-Site Scripting stored in Alkacon OpenCMS | MEDIUM | 6.4 | May 30, 2024 |
| CVE-2023-6380 | Open Redirect in Alkacon Software OpenCms | MEDIUM | 6.1 | Dec 13, 2023 |
| CVE-2023-6379 | Cross-site Scripting in Alkacon Software OpenCms | MEDIUM | 6.1 | Dec 13, 2023 |
| CVE-2023-37602 | An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading… | MEDIUM | 6.1 | Jul 20, 2023 |
| CVE-2023-31544 | A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload… | MEDIUM | 5.4 | May 16, 2023 |
| CVE-2021-25968 | OpenCMS - Stored Cross-Site Scripting (XSS) in Sitemap | MEDIUM | 5.4 | Oct 19, 2021 |
| CVE-2021-3312 | An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate file… | MEDIUM | 6.5 | Oct 8, 2021 |
| CVE-2019-13236 | In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface. | MEDIUM | 6.1 | Aug 27, 2019 |
| CVE-2019-11819 | Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp… | HIGH | 7.8 | May 8, 2019 |
| CVE-2019-11818 | Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.j… | LOW | 1.3 | May 8, 2019 |
| CVE-2018-8815 | Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a… | MEDIUM | 4.6 | Mar 20, 2018 |
| CVE-2018-8811 | Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authen… | HIGH | 8.8 | Mar 20, 2018 |
| CVE-2015-2351 | Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms 9.5.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the… | LOW | 1.3 | Mar 19, 2015 |
| CVE-2013-4600 | Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) t… | LOW | 1.3 | Aug 9, 2013 |
| CVE-2008-1753 | Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary… | LOW | 1.3 | Apr 11, 2008 |
| CVE-2008-1510 | Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary… | LOW | 1.3 | Mar 25, 2008 |
| CVE-2008-1301 | Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote… | MEDIUM | 4.6 | Mar 12, 2008 |
| CVE-2008-1300 | Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alk… | LOW | 1.3 | Mar 12, 2008 |
| CVE-2008-1045 | Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows… | LOW | 1.3 | Feb 27, 2008 |
Showing 1 to 25 of 32 CVEs