Vulnerabilities > Alkacon > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-08-27 | CVE-2019-13235 | Cross-site Scripting vulnerability in Alkacon Opencms Apollo Template 10.5.4/10.5.5 In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form. | 6.1 |
| 2019-08-27 | CVE-2019-13234 | Cross-site Scripting vulnerability in Alkacon Opencms Apollo Template 10.5.4/10.5.5 In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine. | 6.1 |
| 2019-05-08 | CVE-2019-11818 | Cross-site Scripting vulnerability in Alkacon Opencms Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). | 6.1 |
| 2018-03-20 | CVE-2018-8815 | Cross-site Scripting vulnerability in Alkacon Opencms 10.5.3 Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a malicious SVG image. | 4.6 |