CVE-2019-11819

PoC ×2—

CVSS 3.0

7.8 high

EPSS

1%p61

Published

May 8, 2019 (May 8, 2019)

Modified

Jun 17, 2026

Description

Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp) via the First Name or Last Name.

Vendors: alkacon
Products: opencms
Weakness: CWE-1236
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.