EPSS
Percentile
44.0%
opencms-core is vulnerable to cross-site scripting (XSS) attack. The attacker can inject arbitrary script through the search engine form.
packetstormsecurity.com/files/154298/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.html
aetsu.github.io/OpenCms
github.com/alkacon/apollo-template/commits/branch_10_5_x
github.com/alkacon/opencms-core/commit/13fc0b8c9a1d36b6541dd5a2debe15fb81de1f0f