CVE-2008-1510

EPSS 0.56%

Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter

Published: 5/1/2022Modified: 6/20/2025
Also known as:GHSA-4fg8-5hwc-wg5v

Description

Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 4.0—CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U

References (5)