In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
alkacon opencms apollo template 10.5.4
alkacon opencms apollo template 10.5.5