Description
dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.
References
- 97089 vdb-entry
- http://www.yiwang6.cn/dotcms.docx
Unscored
CVE-2017-6003
EUVD-2017-15071GHSA-fr3q-54vq-6672
dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.
Published Mar 27, 2017 · Updated Aug 5, 2024 · Assigned by mitre