CVE-2020-17542

Cross Site Scripting XSS in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin//c/workflow" component...

CVE-2020-17542

DotCMS v5.1.5 has a Cross Site Scripting (XSS) vulnerability in the Task Detail comment window of the /dotAdmin/#/c/workflow component that could allow a remote attacker to execute arbitrary code. Affected product/endpoint: dotCMS 5.1.5, component: Task Detail in the workflow editor. Root cause: ...