CVE-2021-35361

CVE-2021-35361 describes a reflected cross-site scripting (XSS) vulnerability in dotCMS 21.05.1 within dotAdmin/#/c/links. The affected component is the web interface under dotAdmin, where a crafted payload can cause the execution of arbitrary HTML or commands. The connected records consistently ...