Alkacon Opencms Apollo Template — known CVE vulnerabilities

Every CVE whose affected-product data names Alkacon Opencms Apollo Template, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-13234 — CVSS 6.1 (medium): In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
• CVE-2019-13235 — CVSS 6.1 (medium): In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
• CVE-2019-13237 — CVSS 4.3 (medium): In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access…