Description
A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.opencms:opencms-core | < 16.0 | 16.0 | GHSA-2887-f3v6-6rjf |
Medium · 6.1
CVE-2023-42345
EUVD-2023-46798GHSA-2887-f3v6-6rjf
Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp
Published May 8, 2026 · Updated May 8, 2026 · Assigned by mitre