Non évaluée
Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inje...
CVE-2016-9891
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameter (aka the media title).
Références
- advisory securityfocus.com
- advisory dotclear.org
- advisory hg.dotclear.org
- advisory smarterbitbybit.com
- patch dev.dotclear.org
- report dev.dotclear.org