Description
Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.opencms:opencms-core | < 6.2.2 | 6.2.2 | GHSA-gj9c-69cm-7c37 |
References
- 21193 third-party-advisory
- http://www.opencms.org/opencms/en/shownews.html?id=1002
- 1302 third-party-advisory
- 20060726 Multiple vulnerabilities in OpenCMS mailing-list
- opencms-message-xss(28033) vdb-entry
- http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt
- http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip