https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:37:17.139094+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-333084 EUVD-2026-333084 2026-10-12T06:37:17.183917+00:00 EUVD-2026-333084 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41446 fkie_cve-2024-41446 2026-10-12T06:37:17.183950+00:00

A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.

 https://cve.radiocsirt.org/vuln/ghsa-7m3w-m5g3-cc88 GHSA-7m3w-m5g3-cc88 — OpenCMS cross-site scripting (XSS) vulnerability 2026-10-12T06:37:17.183982+00:00

Affected: Maven: org.opencms:opencms-core

A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.