Description
Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) discription or (2) comments field, related to users/userAddContent.
Unscored
CVE-2018-16622
EUVD-2018-8429GHSA-jmm7-j5h8-qc7p
Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web…
Published Sep 6, 2018 · Updated Sep 17, 2024 · Assigned by mitre