/servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection.

Published May 14, 2019 · Updated Aug 4, 2024 · Assigned by mitre