← back
CVE-2019-13236

CVE-2019-13236

EPSS 3.1%
In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/154283/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.htmlunverifiedexploitdbwww.exploit-db.com/exploits/47339unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/154283/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.htmlhttps://aetsu.github.io/OpenCmshttps://github.com/alkacon/opencms-core/commits/branch_10_5_xhttps://twitter.com/aetsu/status/1152096227938459648