CVE-2016-3971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lucenesearch.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/portal/layout...

PT-2016-5783

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.5.1 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the query parameter to the "c/portal/layout" endpoint,...