Back
CVE-2005-4475
Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
Published: Dec 22, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| alkacon | opencms | 6.0.2 |
| alkacon | opencms | 6.0.3 |
GitHub Security Advisory GHSA-6vgx-633w-89g7
Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to...
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
1.33%
Top 31% most likely to be exploited
Threat Score
27.6 / 100
Data Sources
NVD
EPSS
GitHub