Description

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2009-0933

Related Vulnerabilities

WordPress Plugin A.M.Y. Cross-Site Scripting (1.3.3)

WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899)

MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9403)

WebLogic CVE-2021-2204 Vulnerability (CVE-2021-2204)

WebLogic CVE-2019-2889 Vulnerability (CVE-2019-2889)

Severity

Medium

Classification

CVE-2009-0933 CWE-707

Tags

Missing Update Known Vulnerabilities