Lucene search
+L

4 matches found

OSV
OSV
•added 2018/11/26 7:29 a.m.•22 views

CVE-2018-19554

An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/imagetool.jsp...

5.4CVSS6AI score
SaveExploits0References1
NVD
NVD
•added 2018/11/26 7:29 a.m.•24 views

CVE-2018-19554

An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/imagetool.jsp...

5.4CVSS5.3AI score0.00597EPSS
SaveExploits0References1
Prion
Prion
•added 2018/11/26 7:29 a.m.•20 views

Design/Logic Flaw

An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/imagetool.jsp...

3.5CVSS5.3AI score0.00597EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/26 12:00 a.m.•4 views

CVE-2018-19554: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/imagetool.jsp...

5.4CVSS5.9AI score0.00597EPSS
SaveExploits0References2
Rows per page
Query Builder