Design/Logic Flaw

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

CVE-2017-6003

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

CVE-2017-6003

CVE-2017-6003 affects dotCMS 3.7.0. The vulnerability is a cross-site scripting (XSS) flaw reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields. The cited sources (NVD, CNVD, OSV, and related entries) confirm a dotCMS 3.7.0 XSS issue but do not provid...