Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-05-08	CVE-2019-11818	Cross-site Scripting vulnerability in Alkacon Opencms Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). network low complexity alkacon CWE-79	6.1
2018-03-20	CVE-2018-8815	Cross-site Scripting vulnerability in Alkacon Opencms 10.5.3 Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a malicious SVG image. network low complexity alkacon CWE-79	4.6