7 matches found
Design/Logic Flaw
dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...
CVE-2017-6003
dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...
PT-2017-16822
Name of the Vulnerable Software and Affected Versions dotCMS version 3.7.0 Description The issue allows for XSS, which is reachable from ext/languages manager/edit language in portal/layout via the bottom two form fields. Recommendations For dotCMS version 3.7.0, at the moment, there is no...
CVE-2017-6003: Improper Neutralization of Input During Web Page Generation
dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...
CVE-2016-3971
Cross-site scripting XSS vulnerability in lucenesearch.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/portal/layout...
CVE-2016-3971: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in lucenesearch.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/portal/layout...
PT-2016-5783
Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.5.1 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the query parameter to the "c/portal/layout" endpoint,...