CVE-2019-13234
published 2019-08-27CVE-2019-13234: In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
PriorityP339medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
2.90%
85.2th percentile
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alkacon | opencms_apollo_template | — | — |
| alkacon | opencms_apollo_template | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
XSS in search engine
osv·2019-11-12
CVE-2019-13234 [MEDIUM] XSS in search engine
XSS in search engine
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
GHSA
XSS in search engine
ghsa·2019-11-12
CVE-2019-13234 [MEDIUM] CWE-79 XSS in search engine
XSS in search engine
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/154298/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.htmlhttps://aetsu.github.io/OpenCmshttps://github.com/alkacon/apollo-template/commits/branch_10_5_xhttp://packetstormsecurity.com/files/154298/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.htmlhttps://aetsu.github.io/OpenCmshttps://github.com/alkacon/apollo-template/commits/branch_10_5_x
2019-08-27
Published