Description

A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload.

Remediation

References

CVE-2021-35361

Related Vulnerabilities

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5596)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (3.8.2.2)

Apache HTTP Server CVE-2009-3720 Vulnerability (CVE-2009-3720)

Lighttpd Use After Free Vulnerability (CVE-2013-4560)

WordPress Plugin Dropbox Folder Share Server-Side Request Forgery (1.9.7)

Severity

Medium

Classification

CVE-2021-35361 CWE-707 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities