PT-2021-20900

Name of the Vulnerable Software and Affected Versions: dotCMS version 21.05.1 Description: A reflected cross site scripting XSS issue in the dotAdmin//c/containers component allows attackers to execute arbitrary commands or HTML via a crafted payload. Recommendations: For dotCMS version 21.05.1,...

CVE-2021-35360: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting XSS vulnerability in dotAdmin//c/containers of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload...