Skip to content
OpenAdvisories

Archive

March 2015

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Low —

    Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters

    Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms 9.5.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) homelink parameter to system/modules/org.opencms.workplace.help/jsptemplates/help_head.jsp, (2) …