Vulnerability Database
290,206
Total vulnerabilities in the database
CVE-2023-31544
A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module.
| Software | From | Fixed in |
|---|---|---|
org.opencms / opencms-core
|
- | 11.0.1 |
| alkacon / opencms | 11.0 | 11.0.x |
| alkacon / opencms | 11.0-beta | 11.0-beta.x |
| alkacon / opencms | 11.0-beta2 | 11.0-beta2.x |
| alkacon / opencms | 11.0-rc | 11.0-rc.x |