Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp

GHSA-4r3g-w24c-gpr6 · CVE-2008-1753

Published May 1, 2022 · Modified Jun 20, 2025

Description

Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2008-1753
WEB https://exchange.xforce.ibmcloud.com/vulnerabilities/41675
WEB https://github.com/alkacon/opencms-core
WEB http://securityreason.com/securityalert/3808

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes