Description
Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified form fields on the blogroll page.
Remediation
References
Related Vulnerabilities
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11112)
Drupal Core 8.8.x Arbitrary File Overwrite (8.8.0 - 8.8.12)
MySQL CVE-2015-4771 Vulnerability (CVE-2015-4771)
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7864)
WordPress Plugin WP eCommerce Multiple Vulnerabilities (3.8.9.5)