EUVD-2015-8697

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cross-site scripting vulnerability in Dotclear before 2.8.2 allows script injection via comment author name.

Reporter	Title	Published	Views	Family All 8
CNVD	Dotclear cross-site scripting vulnerability (CNVD-2017-01936)	16 Feb 201700:00	–	cnvd
CVE	CVE-2015-8831	9 Feb 201715:00	–	cve
Cvelist	CVE-2015-8831	9 Feb 201715:00	–	cvelist
NVD	CVE-2015-8831	9 Feb 201715:59	–	nvd
OSV	UBUNTU-CVE-2015-8831	9 Feb 201715:59	–	osv
Prion	Cross site scripting	9 Feb 201715:59	–	prion
UbuntuCve	CVE-2015-8831	9 Feb 201715:59	–	ubuntucve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2015-8831	10 Sep 202500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "f678c8f0-4fd9-3cba-bfdc-b0a8e522e934",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ae6416f0-652a-3088-8ab2-8b1ced89c7ad",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/134353/dotclear-2.8.1-Cross-Site-Scripting.html
openwall	www.openwall.com/lists/oss-security/2016/03/07/5
blog	www.blog.curesec.com/article/blog/dotclear-281-XSS-94.html
openwall	www.openwall.com/lists/oss-security/2016/03/05/4
dotclear	www.dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2
securityfocus	www.securityfocus.com/bid/96377
hg	www.hg.dotclear.org/dotclear/rev/65e65154dadf
seclists	www.seclists.org/fulldisclosure/2015/Nov/59
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 36.1

CVSS 24.3

EPSS0.00927