CVE-2019-13236

MEDIUM

XSS issues in the management interface

Title source: GitHub Advisory
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-13236 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

org.opencms:opencms-core

Browse Maven / org.opencms:opencms-core
GitHub AdvisoryBefore 11.0.1 · Fixed in 11.0.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBAlkacon OpenCMS 10.5.x - Cross-Site Scripting (2)ExploitDB exploitby AetsuNot analyzed1 file
ExploitDB
PoC details

References

5