Alkacon: >> Opencms >> 11.0.2 Security Vulnerabilities
An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server's file system by uploading a crafted SVG document.
CVSS Score
6.5
EPSS Score
0.005
Published
2021-10-08
Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the name field in a comment, and other unspecified vectors.
CVSS Score
4.3
EPSS Score
0.003
Published
2010-03-26