Security Advisory

CVE-2024-5520

6.4
MEDIUM

Vulnerability Description

Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could allow a user with sufficient privileges to create and modify web pages through the admin panel, can execute malicious JavaScript code, after inserting code in the “title” field.
Published Date May 30, 2024
Official Source NIST NVD Advisory