CVE-2009-4505

OpenCMS OAMP Comments Module 1.0.1 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the name field in a comment, and other unspecified vectors.

Scores

EPSS 0.0029
EPSS Percentile 51.6%

Classification

CWE
CWE-79
Status published

Affected Products (2)

alkacon/oamp_comments
n/a/n/a

Timeline

Published Mar 26, 2010
Tracked Since Feb 18, 2026