Medium severity5.4NVD Advisory· Published Apr 21, 2025· Updated Jul 5, 2026
CVE-2024-41446
CVE-2024-41446
Description
A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.opencms:opencms-coreMaven | <= 17.0 | — |
Affected products
2Patches
Vulnerability mechanics
References
4- github.com/Sidd545-cr/CVE/blob/main/CVE-2024-41446%20-%20Stored%20XSS%20in%20image%20copyright%20attribute.pdfnvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-7m3w-m5g3-cc88ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-41446ghsaADVISORY
- www.opencms.orgghsaWEB
News mentions
0No linked articles in our index yet.