dotCMS Stored Cross-Site Scripting Vulnerability

dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in the vanity-urls Title field in dotCMS version 4.1.1, which originat...

PT-2017-13914

Name of the Vulnerable Software and Affected Versions dotCMS version 4.1.1 Description The issue affects the dotCMS application, where a Stored Cross-Site Scripting XSS vulnerability is present. This vulnerability impacts the Title field of vanity-urls, the Description field of containers, and th...

CVE-2017-15219: Improper Neutralization of Input During Web Page Generation

The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting XSS affecting a vanity-urls Title field, a containers Description field, and a templates Description field...