Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Opencms | Alkacon | 6.0.0 (including) | 6.0.0 (including) |
| Opencms | Alkacon | 6.0.2 (including) | 6.0.2 (including) |
| Opencms | Alkacon | 6.0.3 (including) | 6.0.3 (including) |