Alkacon OpenCMS version 10.5.x suffers from a cross site scripting vulnerability in its site management functionality.