PT-2016-5783

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.5.1 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the query parameter to the "c/portal/layout" endpoint,...