Skip to content

Product

alkacon Open CMS vulnerabilities

2 published CVES affecting alkacon Open CMS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest alkacon Open CMS CVEs

Newest publication first

  1. CVE-2023-6380 Open Redirect in Alkacon Software OpenCms

    Published
    MediumCVSS 6.1 EPSS 1.6%

    Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template. An attacker could create a specially crafted URL and send it to a specific user to redirect them to a malicious site and compromise them. Exploitation of thi...

  2. CVE-2023-6379 Cross-site Scripting in Alkacon Software OpenCms

    Published
    MediumCVSS 6.1 EPSS 1.8%

    Cross-site scripting (XSS) vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to a victim and partially take control of their browsing...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.