Description
/servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2020-14781 Vulnerability (CVE-2020-14781)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9033)
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-16397)
WordPress Plugin Simple Ads Manager Denial of Service (2.9.3.114)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1864)