Skip to main content
Loading…
    CVE-2026-2736 — Reflected Cross-site Scripting (XSS) in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL containing th — CVE Database · The Intelligence Room