PT-2016-7864

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.11 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media title parameter in admin/media.php and admin/media item.php...