Approved changes feed: RSS · Atom
cpe:2.3:a:alkacon:opencms:18.0:*:*:*:*:*:*:*
part: a version: 18.0 update: *
| Vendor | Alkacon (3bbcd211-d08b-568f-b8a5-0c270556c43d) |
|---|---|
| Product | Opencms (443c1ba7-ecf6-55d1-8f09-8482e1caa421) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2736 |
vulnerable | 2026-06-08 07:55:17.445219 |
Reflected Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms
Reflected Cross-site Scripting (XSS) in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL containing the ‘q’ parameter in ‘/search/index.html’. This vulnerability can be exploited to steal sensitive user information such as session cookies, or to perform actions while impersonating the user.
Published: 2026-02-19T08:39:46.150Z
Updated: 2026-03-09T08:54:49.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2735 |
vulnerable | 2026-06-08 07:55:17.443695 |
Stored Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms
Stored Cross-Site Scripting (XSS) in Alkacon's OpenCms v18.0, which occurs when user input is not properly validated when sending a POST request to ‘/blog/new-article/org.opencms.ugc.CmsUgcEditService.gwt’ using the ‘text’ parameter.
Published: 2026-02-19T08:38:31.071Z
Updated: 2026-02-20T16:05:26.014Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.