https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-42699.htmlhttps://patchthecve.com/cve/CVE-2024-42699.htmlWed, 17 Jun 2026 07:49:53 +0000MEDIUM 6.5: Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image fieldhttps://patchthecve.com/cve/CVE-2024-41446.htmlhttps://patchthecve.com/cve/CVE-2024-41446.htmlSun, 05 Jul 2026 16:19:05 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.https://patchthecve.com/cve/CVE-2024-41447.htmlhttps://patchthecve.com/cve/CVE-2024-41447.htmlWed, 17 Jun 2026 07:47:43 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function.