CVE-2017-6446

2017-03-0521:59:00

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

JSON

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters.

CPENameOperatorVersion
dotcleareq2.6.4
dotcleareq2.7.2
dotcleareq2.4.3
dotcleareq2.11.0
dotcleareq2.7.1
dotcleareq2.8.1
dotcleareq2.10.2
dotcleareq2.9.0
dotcleareq2.10.3
dotcleareq2.7.0

Name	Operator	Version
dotclear	eq	2.6.4
dotclear	eq	2.7.2
dotclear	eq	2.4.3
dotclear	eq	2.11.0
dotclear	eq	2.7.1
dotclear	eq	2.8.1
dotclear	eq	2.10.2
dotclear	eq	2.9.0
dotclear	eq	2.10.3
dotclear	eq	2.7.0