Description
Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.opencms:opencms-core | < 6.0.3 | 6.0.3 | GHSA-g4fc-j79q-gjrh |
References
- 18046 third-party-advisory
- ADV-2005-2923 vdb-entry
- http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1910
- 15882 vdb-entry
- http://www.opencms.org/opencms/en/download/opencms.html
- 20051215 [scip_Advisory 1910] Alkacon OpenCms 6.0.2 login Cross Site Scripting mailing-list
- 1015365 vdb-entry