Description XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter. Remediation References CVE-2017-5876 Related Vulnerabilities PHP Out-of-bounds Read Vulnerability (CVE-2020-7061) WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11112) Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33513) Chamilo Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27426) MySQL CVE-2018-3156 Vulnerability (CVE-2018-3156) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-5876