Approved changes feed: RSS · Atom

cpe:2.3:a:alkacon:opencms:17.0.0:*:*:*:*:*:*:*

part: a version: 17.0.0 update: *

VendorAlkacon (3bbcd211-d08b-568f-b8a5-0c270556c43d)
ProductOpencms (443c1ba7-ecf6-55d1-8f09-8482e1caa421)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/alkacon/opencms-core purl2cpe 2026-06-01 10:16:11.120029
pkg:maven/org.opencms/opencms-core purl2cpe 2026-06-01 10:16:11.120030

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42699 vulnerable 2026-06-08 06:45:46.896688 Details available
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field
Published: 2025-04-21T00:00:00.000Z
Updated: 2025-04-21T16:06:19.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41447 vulnerable 2026-06-08 06:43:54.520671 Details available
A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function.
Published: 2025-04-18T00:00:00.000Z
Updated: 2025-04-18T19:27:33.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41446 vulnerable 2026-06-08 06:43:54.520143 Details available
A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.
Published: 2025-04-21T00:00:00.000Z
Updated: 2026-07-05T16:05:33.166Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.