CVE-2019-13235

MEDIUM

XSS in login form

Title source: GitHub Advisory
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-13235 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

org.opencms:opencms-core

Browse Maven / org.opencms:opencms-core
GitHub AdvisoryBefore 11.0.1 · Fixed in 11.0.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBAlkacon OpenCMS 10.5.x - Cross-Site ScriptingExploitDB exploitby AetsuNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

4