PT-2021-20901

Name of the Vulnerable Software and Affected Versions: dotCMS version 21.05.1 Description: A reflected cross site scripting XSS issue in the dotAdmin//c/links component allows attackers to execute arbitrary commands or HTML via a crafted payload. Recommendations: For dotCMS version 21.05.1,...

CVE-2021-35361: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting XSS vulnerability in dotAdmin//c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload...