CVE-2008-2397

The CVE-2008-2397 is an XSS vulnerability in dotCMS 1.x, affecting the search-results.dot component via the search_query parameter. The underlying issue is failure to sanitize this input, enabling remote attackers to inject arbitrary HTML/JavaScript into a user’s browser. Connected sources (Nessu...