Description

dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.

Remediation

References

CVE-2017-6003

Related Vulnerabilities

WordPress Plugin Get URL Cron Multiple Vulnerabilities (1.4.7)

WordPress Plugin MailChimp Forms by MailMunch Unspecified Vulnerability (2.0.6.3)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1766)

WordPress Plugin Client Invoicing by Sprout Invoices-Easy Estimates and Invoices for WordPress Cross-Site Scripting (19.9.6)

ProjectSend Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-7658)

Severity

Medium

Classification

CVE-2017-6003 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities