0.001 Low
EPSS
Percentile
30.1%
Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) discription or (2) comments field, related to users/userAddContent.
github.com/doramart/DoraCMS/issues/136