Alkacon

Products

ProductCVEsExploitedLatest
OpenCMS4–Feb 19, 2026
Open CMS2–Dec 13, 2023

Exploited and recent CVEs

  • CVE-2026-2736 Medium 5.1 Reflected Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms 0.2%
  • CVE-2026-2735 Medium 5.1 Stored Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms 0.2%
  • CVE-2024-5521 Medium 6.4 Cross-Site Scripting stored in Alkacon OpenCMS 0.3%
  • CVE-2024-5520 Medium 6.4 Cross-Site Scripting stored in Alkacon OpenCMS 0.3%
  • CVE-2023-6380 Medium 6.1 Open Redirect in Alkacon Software OpenCms 1.6%
  • CVE-2023-6379 Medium 5.4 Cross-site Scripting in Alkacon Software OpenCms 1.8%