6.2.1

DATE	CVE	VULNERABILITY TITLE	RISK
2019-05-08	CVE-2019-11819	Improper Neutralization of Formula Elements in a CSV File vulnerability in Alkacon Opencms Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp) via the First Name or Last Name. local low complexity alkacon CWE-1236	7.8
2019-05-08	CVE-2019-11818	Cross-site Scripting vulnerability in Alkacon Opencms Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). network low complexity alkacon CWE-79	6.1