CVE-2019-13235
published 2019-08-27CVE-2019-13235: In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
PriorityP338medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
2.90%
85.2th percentile
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alkacon | opencms_apollo_template | — | — |
| alkacon | opencms_apollo_template | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
XSS in login form
osv·2019-11-12
CVE-2019-13235 [MEDIUM] XSS in login form
XSS in login form
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
GHSA
XSS in login form
ghsa·2019-11-12
CVE-2019-13235 [MEDIUM] CWE-79 XSS in login form
XSS in login form
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/154298/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.htmlhttps://aetsu.github.io/OpenCmshttps://github.com/alkacon/apollo-template/commits/branch_10_5_xhttp://packetstormsecurity.com/files/154298/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.htmlhttps://aetsu.github.io/OpenCmshttps://github.com/alkacon/apollo-template/commits/branch_10_5_x
2019-08-27
Published