Description

Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email.

Remediation

References

CVE-2018-5689

Related Vulnerabilities

MySQL Use After Free Vulnerability (CVE-2017-3302)

Oracle Application Server CVE-2008-0344 Vulnerability (CVE-2008-0344)

WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.18)

WordPress Plugin My Chatbot Cross-Site Scripting (1.1)

WordPress Plugin WP Custom Admin Interface PHP Object Injection (7.28)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-5689