Description
XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.
Remediation
References
Related Vulnerabilities
Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-26072)
WordPress Plugin Frontend File Manager Arbitrary File Upload (1.8)
WordPress Plugin Feature Slideshow 'src' Parameter Cross-Site Scripting (1.0.6beta)
Joomla CVE-2012-0819 Vulnerability (CVE-2012-0819)
WordPress Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-31210)