Unscored CVE-2014-5316 EUVD-2014-5207GHSA-h7h7-mgpq-r7gq

Cross-site scripting (XSS) vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a craf…

Published Sep 22, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted page.