{"action":"Upgrade org.opencms:opencms-core to 6.2.2 or later.","affected":[{"fixed":"6.2.2","introduced":"0"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2006-3933"],"ecosystem":"Maven","epss":0.01119,"exploited":false,"fixed_versions":["6.2.2"],"ghsa_id":"GHSA-gj9c-69cm-7c37","id":"tcs_01M5N8YERTNKHWBRXAAVS1B4PX","modified_at":"2025-06-20T16:29:48.703789Z","published_at":"2022-05-01T07:13:43Z","references":["https://osv.dev/vulnerability/GHSA-gj9c-69cm-7c37","https://nvd.nist.gov/vuln/detail/CVE-2006-3933","https://github.com/alkacon/opencms-core/commit/e2d3754ef27e8e8e122700bdb3f59e6e15995bae","https://exchange.xforce.ibmcloud.com/vulnerabilities/28033","https://github.com/alkacon/opencms-core","http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt","http://securityreason.com/securityalert/1302","http://www.opencms.org/opencms/en/shownews.html?id=1002"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-gj9c-69cm-7c37","url":"https://osv.dev/vulnerability/GHSA-gj9c-69cm-7c37"}],"summary":"Alkacon OpenCms XSS via unsanitized message body"}