Description

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2009-0933

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Local File Inclusion (1.3.64)

Jboss EAP Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-5731)

axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11619)

PHP Improper Certificate Validation Vulnerability (CVE-2015-3152)

Severity

Medium

Classification

CVE-2009-0933 CWE-707

Tags

Missing Update Known Vulnerabilities