CVE-2006-3933
alkacon opencms: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in org.opencms:opencms-core 6.2.2.
Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- alkacon:opencms
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-gj9c-69cm-7c37 | Maven | org.opencms:opencms-core | <6.2.2 | 6.2.2 |