Skip to content
OpenAdvisories
Unscored CVE-2020-17542 EUVD-2020-9473GHSA-fv89-655w-g497

Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Ta…

Published Apr 23, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin/#/c/workflow" component.

References