Description

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters.

Remediation

References

CVE-2017-6446

Related Vulnerabilities

WordPress Plugin WP Socializer-Simple & Easy Social Media Share Icons Cross-Site Scripting (2.4.2)

WordPress Plugin Mapplic-Custom Interactive Map Server-Side Request Forgery (6.1)

PHP Other Vulnerability (CVE-2006-4023)

WordPress Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2017-5493)

WordPress Plugin WP Fastest Cache SQL Injection (0.8.7.4)

Severity

Medium

Classification

CVE-2017-6446 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities