Description
XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2010-2390 Vulnerability (CVE-2010-2390)
WordPress Plugin WP Rocket Local File Inclusion (2.10.3)
OpenSSL Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2022-0778)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3181)
WordPress Plugin WP Dynamic Keywords Injector Cross-Site Request Forgery (2.3.15)