Description
XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter.
Remediation
References
Related Vulnerabilities
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.6)
WordPress Plugin Rezgo Online Booking Cross-Site Scripting (4.1.7)
WordPress 4.1.x Cross-Site Request Forgery (4.1 - 4.1.25)
Oracle Database Server CVE-2014-6514 Vulnerability (CVE-2014-6514)
WordPress Plugin Kadence WooCommerce Email Designer PHP Object Injection (1.5.6)