Description
Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) q or (2) link_type parameter to admin/media.php.
Unscored
CVE-2016-6523
EUVD-2016-7444GHSA-2pvj-5j7v-jjxj
Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary…
Published Dec 9, 2016 · Updated Aug 6, 2024 · Assigned by mitre