VYPR
← All advisories
Medium severity6.4NVD Advisory· Published May 30, 2024· Updated Jun 17, 2026

CVE-2024-5521

CVE-2024-5521

Description

Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could allow a user having the roles of gallery editor or VFS resource manager will have the permission to upload images in the .svg format containing JavaScript code. The code will be executed the moment another user accesses the image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Alkacon/Opencms3 versions
    cpe:2.3:a:alkacon:opencms:16.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:alkacon:opencms:16.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 16
    • (no CPE)range: 16

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.