← CVE Intelligence

CVE-2024-5520

Cross-Site Scripting stored in Alkacon OpenCMS PUBLISHED

Description (CNA)

Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could allow a user with sufficient privileges to create and modify web pages through the admin panel, can execute malicious JavaScript code, after inserting code in the “title” field.

Affected (CNA)

Vendor / productVersions
Alkacon / OpenCMSaffected 16

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.