Unrated

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated u...

CVE-2018-16358 First seen on SecPulse Sep 3, 2018

Original description The description as published by the source.

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory hg.dotclear.org

Key facts

Severity: Unrated
Published: Sep 3, 2018
First seen on SecPulse: Sep 3, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49