CVE-2013-4600
alkacon opencms: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days. Fixed in org.opencms:opencms-core 8.5.2.
Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to system/workplace/views/admin/admin-main.jsp or the (2) requestedResource parameter to system/login/index.html.
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- alkacon:opencms
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4gfx-p2j4-w2vh | Maven | org.opencms:opencms-core | <8.5.2 | 8.5.2 |