Description
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
Remediation
References
Related Vulnerabilities
WordPress Plugin TweetScribe Cross-Site Request Forgery (1.1)
WordPress Plugin Limit Login Attempts Reloaded Security Bypass (2.7.4)
MySQL CVE-2017-3308 Vulnerability (CVE-2017-3308)
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.8)
PHP Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-5458)