Approved changes feed: RSS · Atom

cpe:2.3:a:org.opencms:opencms-core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOrg.Opencms (33222352-a344-538a-9e16-d9f9686ee626)
ProductOpencms Core (2a072d4d-a4c4-5397-a2ab-ad1eece9386c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25968 vulnerable 2026-06-08 05:30:41.797334 OpenCMS - Stored Cross-Site Scripting (XSS) in Sitemap
MEDIUM (5.4)
In “OpenCMS”, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts are executed in a victim’s browser when they open the page containing the vulnerable field.
Published: 2021-10-19T08:15:12.000Z
Updated: 2025-04-30T16:00:50.132Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.