PT-2018-13652

Name of the Vulnerable Software and Affected Versions DoraCMS version 2.0.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the /api/content/addOne endpoint and allow remote attackers to inject arbitrary web script or HTML. Th...

CVE-2018-16622: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 discription or 2 comments field, related to users/userAddContent...