CVE-2023-42346

UNKNOWN NVD

CVSS Score 0

Severity UNKNOWN

Published May 08, 2026

Vendor unknown

Description

Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.