Unscored CVE-2021-35358 EUVD-2021-22001GHSA-xfg5-g4p4-9gqx

A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbi…

Published Jul 9, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' and 'Filename' parameters.

References

https://github.com/dotCMS/core/issues/20540