dotCMS cross-site scripting vulnerability (CNVD-2019-07129)

dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . The 'fieldName' and 'inode' parameters in the /html/portlet/ext/contentlet/imagetools/index.jsp page in dotCMS...

CVE-2018-16980

dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/imagetools/index.jsp fieldName and inode parameters...

CVE-2018-16980

CVE-2018-16980 affects dotCMS v5.0.1 and is a cross-site scripting vulnerability in the /html/portlet/ext/contentlet/image_tools/index.jsp page, specifically in the fieldName and inode parameters. The connected documents corroborate XSS details (CNVD-2019-07129, NVD entry). The exact exploitabili...

CVE-2018-16980

dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/imagetools/index.jsp fieldName and inode parameters...

CVE-2018-16980: Improper Neutralization of Input During Web Page Generation

dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/imagetools/index.jsp fieldName and inode parameters...

XSS vulnerability in pagepicker.action and spacepagepicker.action

The following URL's are vulnerable: - /users/pagepicker.action - /users/spacepagepicker.action on formname, fieldname and currentspace panel:bgColor=99ff99 h4. Patch instructions for 2.6.x and 2.7.x 1. Shut down Confluence 2. Copy attached pagepicker.vm to confluence/users/ 3. Start up Confluence...