CVE-2008-1300
alkacon opencms: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days. Fixed in org.opencms:opencms-core 7.0.5.
Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- alkacon:opencms
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-w3v2-vfrj-j9g8 | Maven | org.opencms:opencms-core | >=7.0.3 <7.0.5 | 7.0.5 |