Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field
{ "github_reviewed_at": "2025-04-21T16:33:10Z", "severity": "LOW", "nvd_published_at": "2025-04-21T15:15:58Z", "github_reviewed": true, "cwe_ids": [ "CWE-79" ] }