Description

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2009-0933

Related Vulnerabilities

TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-11069)

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7061)

WordPress Plugin Notices Ticker Cross-Site Request Forgery (5.0)

WordPress Plugin WooCommerce Cross-Site Scripting (2.0.17)

Apache HTTP Server Improper Input Validation Vulnerability (CVE-2014-0117)

Severity

Medium

Classification

CVE-2009-0933 CWE-707

Tags

Missing Update Known Vulnerabilities